PT-2021-7725 · Linux+8 · Linux Kernel+8

Syzkaller · Published 2021-12-17 · Updated 2025-02-20 · CVE-2022-4744

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality. This issue occurs when a user registers the device and the register netdevice function fails, specifically with the NETDEV REGISTER notifier. The flaw allows a local user to crash or potentially escalate their privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Access of Uninitialized Pointer

Double Free

Weakness Enumeration

CWE-460

CWE-824

CWE-415

Related Identifiers

ALSA-2023:1469

ALSA-2023:1470

ALSA-2023:7077

ALT-PU-2021-3644

ALT-PU-2022-1015

ALT-PU-2022-1016

ALT-PU-2022-1026

ALT-PU-2022-1051

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2022-2445

ALT-PU-2022-2451

ALT-PU-2022-2633

ALT-PU-2022-2635

ALT-PU-2022-2664

ALT-PU-2023-1566

ALT-PU-2023-4894

BDU:2023-01797

CESA-2023_6901

CESA-2023_7077

CVE-2022-4744

DLA-3403-1

OESA-2023-1228

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

OPENSUSE-SU-2024_1321-1

OPENSUSE-SU-2024_1322-1

OPENSUSE-SU-2024_1322-2

OPENSUSE-SU-2024_1332-1

OPENSUSE-SU-2024_1332-2

OPENSUSE-SU-2024_1466-1

OPENSUSE-SU-2024_1480-1

OPENSUSE-SU-2024_1489-1

OPENSUSE-SU-2024_1490-1

RHSA-2023:1466

RHSA-2023:1467

RHSA-2023:1468

RHSA-2023:1469

RHSA-2023:1470

RHSA-2023:1471

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_1469

RHSA-2023_1470

RHSA-2023_6901

RHSA-2023_7077

RHSA-2024:1404

RLSA-2023:1469

RLSA-2023:1470

SUSE-SU-2023:1800-1

SUSE-SU-2023:1802-1

SUSE-SU-2023:1811-1

SUSE-SU-2023:1892-1

SUSE-SU-2023:1897-1

SUSE-SU-2023:1992-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2694-1

SUSE-SU-2023:2695-1

SUSE-SU-2023:2698-1

SUSE-SU-2023:2701-1

SUSE-SU-2023:2710-1

SUSE-SU-2023:2714-1

SUSE-SU-2023:2724-1

SUSE-SU-2023:2727-1

SUSE-SU-2023:2741-1

SUSE-SU-2023:2755-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

SUSE-SU-2024:1321-1

SUSE-SU-2024:1454-1

SUSE-SU-2024:1466-1

SUSE-SU-2024:1480-1

SUSE-SU-2024:1489-1

SUSE-SU-2024:1490-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

References · 1449

• https://osv.dev/vulnerability/SUSE-SU-2023:2755-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:1469 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=158b515f703e · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:1469 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1480-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-1470.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2727-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1466-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:1470 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2724-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:1470 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-4744 · Security Note
• https://osv.dev/vulnerability/OESA-2023-1228 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-7077.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1611 · Security Note