Vulnerability identifier: #VU92880

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-48724

CWE-ID: CWE-401

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the intel_setup_irq_remapping() function in drivers/iommu/intel_irq_remapping.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/a0c685ba99961b1dd894b2e470e692a539770f6d
http://git.kernel.org/stable/c/a31cb1f0fb6caf46ffe88c41252b6b7a4ee062d9
http://git.kernel.org/stable/c/5c43d46daa0d2928234dd2792ebebc35d29ee2d1
http://git.kernel.org/stable/c/9d9995b0371e4e8c18d4f955479e5d47efe7b2d4
http://git.kernel.org/stable/c/336d096b62bdc673e852b6b80d5072d7888ce85d
http://git.kernel.org/stable/c/b62eceb5f8f08815fe3f945fc55bbf997c344ecd
http://git.kernel.org/stable/c/99e675d473eb8cf2deac1376a0f840222fc1adcf

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.