PT-2022-5917 · Linux+10 · Linux Kernel+10

Kyle Zeng · Published 2017-03-17 · Updated 2023-12-06 · CVE-2022-4378

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a stack overflow flaw in the Linux kernel's SYSCTL subsystem, which occurs when a user changes certain kernel parameters and variables. This flaw can be exploited by a local user to crash the system or potentially escalate their privileges. The vulnerability is associated with the use of a function with inconsistent implementations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-474

CWE-787

CWE-131

Related Identifiers

ALSA-2023:0951

ALSA-2023:0979

ALSA-2023:1566

ALSA-2023:1584

ALT-PU-2017-1299

ALT-PU-2018-1557

ALT-PU-2019-1139

ALT-PU-2019-1363

ALT-PU-2020-1145

ALT-PU-2020-1251

ALT-PU-2020-2164

ALT-PU-2021-1447

ALT-PU-2021-1525

ALT-PU-2021-1869

ALT-PU-2021-1888

ALT-PU-2021-1896

ALT-PU-2022-1175

ALT-PU-2022-1647

ALT-PU-2022-2155

ALT-PU-2022-3303

ALT-PU-2022-3306

ALT-PU-2022-3364

ALT-PU-2022-3371

ALT-PU-2023-1042

ALT-PU-2023-1044

ALT-PU-2023-1059

ALT-PU-2023-1066

ALT-PU-2023-1070

ALT-PU-2023-1128

ALT-PU-2023-1154

ALT-PU-2023-1155

ALT-PU-2023-1342

ALT-PU-2023-1378

ALT-PU-2023-7007

ALT-PU-2023-7682

BDU:2022-07336

CESA-2023_1091

CESA-2023_1566

CESA-2023_1584

CESA-2023_1659

CVE-2022-4378

DLA-3244-1

DLA-3245-1

LSN-0092-1

MGASA-2022-0477

MGASA-2022-0478

OESA-2022-2162

OPENSUSE-SU-2022_4503-1

OPENSUSE-SU-2022_4504-1

OPENSUSE-SU-2022_4574-1

OPENSUSE-SU-2022_4585-1

OPENSUSE-SU-2022_4613-1

OPENSUSE-SU-2022_4616-1

OPENSUSE-SU-2022_4617-1

RHSA-2023:0856

RHSA-2023:0858

RHSA-2023:0944

RHSA-2023:0945

RHSA-2023:0951

RHSA-2023:0979

RHSA-2023:1008

RHSA-2023:1091

RHSA-2023:1092

RHSA-2023:1101

RHSA-2023:1103

RHSA-2023:1109

RHSA-2023:1110

RHSA-2023:1202

RHSA-2023:1203

RHSA-2023:1220

RHSA-2023:1221

RHSA-2023:1251

RHSA-2023:1435

RHSA-2023:1566

RHSA-2023:1584

RHSA-2023:1659

RHSA-2023:1705

RHSA-2023:1706

RHSA-2023:1822

RHSA-2023:3388

RHSA-2023:3431

RHSA-2023:3491

RHSA-2023_0951

RHSA-2023_0979

RHSA-2023_1091

RHSA-2023_1092

RHSA-2023_1566

RHSA-2023_1584

RLSA-2023:0979

RLSA-2023:1566

RLSA-2023:1584

ROSA-SA-2023-2189

RXSA-2023:0951

RXSA-2023:1566

SUSE-SU-2022:4503-1

SUSE-SU-2022:4504-1

SUSE-SU-2022:4505-1

SUSE-SU-2022:4506-1

SUSE-SU-2022:4510-1

SUSE-SU-2022:4513-1

SUSE-SU-2022:4515-1

SUSE-SU-2022:4516-1

SUSE-SU-2022:4517-1

SUSE-SU-2022:4518-1

SUSE-SU-2022:4520-1

SUSE-SU-2022:4527-1

SUSE-SU-2022:4528-1

SUSE-SU-2022:4533-1

SUSE-SU-2022:4534-1

SUSE-SU-2022:4539-1

SUSE-SU-2022:4542-1

SUSE-SU-2022:4543-1

SUSE-SU-2022:4544-1

SUSE-SU-2022:4545-1

SUSE-SU-2022:4546-1

SUSE-SU-2022:4550-1

SUSE-SU-2022:4551-1

SUSE-SU-2022:4559-1

SUSE-SU-2022:4560-1

SUSE-SU-2022:4562-1

SUSE-SU-2022:4566-1

SUSE-SU-2022:4569-1

SUSE-SU-2022:4572-1

SUSE-SU-2022:4573-1

SUSE-SU-2022:4574-1

SUSE-SU-2022:4577-1

SUSE-SU-2022:4580-1

SUSE-SU-2022:4585-1

SUSE-SU-2022:4587-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4595-1

SUSE-SU-2022:4613-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4615-1

SUSE-SU-2022:4616-1

SUSE-SU-2022:4617-1

USN-5799-1

USN-5803-1

USN-5809-1

USN-5814-1

USN-5831-1

USN-5832-1

USN-5860-1

USN-5877-1

USN-5879-1

USN-5883-1

USN-5919-1

USN-5920-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 768

• https://osv.dev/vulnerability/RLSA-2023:0979 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-0979.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4503-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3649 · Vendor Advisory
• https://errata.rockylinux.org/RXSA-2023:0951 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4574-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12008.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20572 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4539-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4520-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29901 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/695541 · Security Note
• https://linux.oracle.com/errata/ELSA-2022-10081.html · Vendor Advisory