#VU104384 Memory leak in Linux kernel - CVE-2022-49153

Vulnerability identifier: #VU104384

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49153

CWE-ID: CWE-401

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the rcu_read_unlock_bh() function in drivers/net/wireguard/socket.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/096f9d35cac0a0c95ffafc00db84786b665a4837
https://git.kernel.org/stable/c/0b19bcb753dbfb74710d12bb2761ec5ed706c726
https://git.kernel.org/stable/c/402991a9771587acc2947cf6c4d689c5397f2258
https://git.kernel.org/stable/c/bbbf962d9460194993ee1943a793a0a0af4a7fbf
https://git.kernel.org/stable/c/ebcc492f4ba14bae54b898f1016a37b4282558d1

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.