#VU104473 Use-after-free in Linux kernel - CVE-2022-49087

Vulnerability identifier: #VU104473

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49087

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the rxrpc_exit_net() function in net/rxrpc/net_ns.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/08ff0e74fab517dbc44e11b8bc683dd4ecc65950
https://git.kernel.org/stable/c/1946014ca3b19be9e485e780e862c375c6f98bad
https://git.kernel.org/stable/c/41024a40f6c793abbb916a857f18fb009f07464c
https://git.kernel.org/stable/c/571d8e1d154ca18f08dcb72b69318d36e10010a0
https://git.kernel.org/stable/c/7ee84d29f22de6f6c63fad6c54690517659862f1
https://git.kernel.org/stable/c/864297ee30727ae6233f80296b7fc91442620b05
https://git.kernel.org/stable/c/cd8aef1f30d1215648e4e6686cfb422004851429

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.