PT-2022-5911 · Linux+4 · Linux Kernel+4

Jiasheng Jiang · Published 2022-01-19 · Updated 2023-08-14 · CVE-2022-3111

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16-rc6

Description An issue was discovered in the Linux kernel related to the function free charger irq() in the module drivers/power/supply/wm8350 power.c. This issue is associated with a pointer dereference error. The exploitation of this issue may allow an attacker to cause a denial of service or elevate their privileges.

Recommendations For Linux kernel versions through 5.16-rc6, as a temporary workaround, consider disabling the free charger irq() function until a patch is available. Restrict access to the wm8350 power module to minimize the risk of exploitation. Avoid using the WM8350 IRQ CHG FAST RDY variable in the affected code until the issue is resolved.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2022-1093

ALT-PU-2022-1175

ALT-PU-2022-1647

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-11611

BDU:2022-07327

CVE-2022-3111

OESA-2022-2161

OESA-2023-1034

OESA-2023-1035

OPENSUSE-SU-2023_0146-1

OPENSUSE-SU-2023_0147-1

OPENSUSE-SU-2023_0149-1

OPENSUSE-SU-2023_0152-1

SUSE-SU-2023:0134-1

SUSE-SU-2023:0146-1

SUSE-SU-2023:0147-1

SUSE-SU-2023:0149-1

SUSE-SU-2023:0152-1

USN-6001-1

USN-6013-1

USN-6014-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Suse

Ubuntu

References · 329

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2023-0386 · Exploit
• 🔥 https://github.com/Crusaders-of-Rust/CVE-2022-0185 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/plummm/CVE-2022-27666 · Exploit
• 🔥 https://github.com/pqlx/CVE-2022-1015 · Exploit