PT-2022-2423 · Linux+9 · Linux Kernel+9

Rohit Keshri · Published 2022-03-10 · Updated 2023-11-09 · CVE-2022-1353

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the pfkey register function in net/key/af key.c allows a local, unprivileged user to gain access to kernel memory. This can lead to a system crash or a leak of internal kernel information, potentially allowing an attacker to obtain unauthorized access to protected information or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALSA-2022:7110

ALSA-2022:7134

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2022-1647

ALT-PU-2022-1730

ALT-PU-2022-1768

ALT-PU-2022-1846

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-9646

BDU:2022-02816

CESA-2022_7110

CESA-2022_7134

CVE-2022-1353

DLA-3065-1

DSA-5127-1

DSA-5173-1

MGASA-2022-0154

MGASA-2022-0155

OESA-2022-1631

OPENSUSE-SU-2022_1676-1

OPENSUSE-SU-2022_1687-1

OPENSUSE-SU-2022_2111-1

RHSA-2022:5934

RHSA-2022:5998

RHSA-2022:6243

RHSA-2022:6248

RHSA-2022:7110

RHSA-2022:7134

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022_7110

RHSA-2022_7134

RHSA-2022_7933

RHSA-2022_8267

RHSA-2023:4801

RHSA-2023:4814

RLSA-2022:7110

RLSA-2022:7134

SUSE-SU-2022:1651-1

SUSE-SU-2022:1668-1

SUSE-SU-2022:1669-1

SUSE-SU-2022:1676-1

SUSE-SU-2022:1686-1

SUSE-SU-2022:1687-1

SUSE-SU-2022:2077-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022_1651-1

SUSE-SU-2022_1669-1

SUSE-SU-2022_1676-1

SUSE-SU-2022_1686-1

SUSE-SU-2022_1687-1

SUSE-SU-2023:0416-1

USN-5467-1

USN-5469-1

USN-5500-1

USN-5505-1

USN-5513-1

USN-5515-1

USN-5541-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 490

• https://github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c · Patch
• https://osv.dev/vulnerability/AZL-9646 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0155.html · Security Note
• https://osv.dev/vulnerability/DSA-5127-1 · Vendor Advisory
• https://debian.org/security/2022/dsa-5173 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5541-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-39714 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1353 · Security Note
• https://ubuntu.com/security/CVE-2022-1679 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4197 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5505-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5500-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0330 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23037 · Vendor Advisory