#VU99136 Resource management error in Linux kernel - CVE-2022-49021
Vulnerability identifier: #VU99136
Vulnerability risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-49021
CWE-ID:
CWE-399
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to resource management error within the module_put() function in drivers/net/phy/phy_device.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel: All versions
External links
https://git.kernel.org/stable/c/8aaafe0f71314f46a066382a047ba8bb3840d273
https://git.kernel.org/stable/c/51d7f6b20fae8bae64ad1136f1e30d1fd5ba78f7
https://git.kernel.org/stable/c/0744c7be4de564db03e24527b2e096b7e0e20972
https://git.kernel.org/stable/c/3e21f85d87c836462bb52ef2078ea561260935c1
https://git.kernel.org/stable/c/fe6bc99c27c21348f548966118867ed26a9a372c
https://git.kernel.org/stable/c/7730904f50c7187dd16c76949efb56b5fb55cd57
https://git.kernel.org/stable/c/eaa5722549ac2604ffa56c2e946acc83226f130c
https://git.kernel.org/stable/c/369eb2c9f1f72adbe91e0ea8efb130f0a2ba11a6
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
