#VU99163 Resource management error in Linux kernel - CVE-2022-48972

Vulnerability identifier: #VU99163

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48972

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the ieee802154_if_add() function in net/mac802154/iface.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
http://git.kernel.org/stable/c/7410f4d1221bb182510b7778ab6eefa8b9b7102d
http://git.kernel.org/stable/c/9980a3ea20de40c83817877106c909cb032692d2
http://git.kernel.org/stable/c/f00c84fb1635c27ba24ec5df65d5bd7d7dc00008
http://git.kernel.org/stable/c/1831d4540406708e48239cf38fd9c3b7ea98e08f
http://git.kernel.org/stable/c/42c319635c0cf7eb36eccac6cda76532f47b61a3
http://git.kernel.org/stable/c/a110287ef4a423980309490df632e1c1e73b3dc9
http://git.kernel.org/stable/c/623918f40fa68e3bb21312a3fafb90f491bf5358
http://git.kernel.org/stable/c/b3d72d3135d2ef68296c1ee174436efd65386f04

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.