#VU104858 Race condition in Linux kernel - CVE-2022-49672

Vulnerability identifier: #VU104858

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49672

CWE-ID: CWE-362

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition within the tun_detach_all() function in drivers/net/tun.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/3b9bc84d311104906d2b4995a9a02d7b7ddab2db
https://git.kernel.org/stable/c/8145f77d38de4f88b8a69e1463f5c09ba189d77c
https://git.kernel.org/stable/c/82e729aee59acefe135fceffadcbc5b86dd4f1b9
https://git.kernel.org/stable/c/8661d4b8faa2f7ee7a559969c0a7c57f077b1728
https://git.kernel.org/stable/c/a8cf919022373c97a84fe596bbea544f909c485d
https://git.kernel.org/stable/c/bec1be0a745ab420718217e3e0d9542a75108989

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.