PT-2022-4872 · Linux+3 · Linux Kernel+3

Anirban Chakraborty + 2 · Published 2022-01-31 · Updated 2023-08-14 · CVE-2022-40476

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.62

Description A null pointer dereference issue was discovered in the fs/io uring.c file in the Linux kernel. This issue could allow a local user to crash the system or potentially cause a denial of service. The exploitation of this issue may result in a disruption of service.

Recommendations For Linux kernel versions prior to 5.15.62, update to version 5.15.62 or later to resolve the issue. As a temporary workaround, consider restricting access to the fs/io uring.c component to minimize the risk of exploitation.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2022-1175

ALT-PU-2022-1647

ALT-PU-2022-2155

ALT-PU-2022-2470

ALT-PU-2022-2487

ALT-PU-2022-2682

ALT-PU-2022-2692

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10969

BDU:2022-05997

CVE-2022-40476

OPENSUSE-SU-2022_3998-1

OPENSUSE-SU-2022_4072-1

OPENSUSE-SU-2022_4617-1

SUSE-SU-2022:3998-1

SUSE-SU-2022:4072-1

SUSE-SU-2022:4617-1

Affected Products

Alt Linux

Linux Kernel

Red Os

Suse

References · 539

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/Markakd/CVE-2022-2588 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2023-0386 · Exploit
• 🔥 https://github.com/Crusaders-of-Rust/CVE-2022-0185 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/plummm/CVE-2022-27666 · Exploit