PT-2022-7214 · Unknown+8 · Multipath-Tools+8
Alexander Bergmann
·
Published
2022-08-24
·
Updated
2025-02-18
·
CVE-2022-41973
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
multipath-tools versions 0.7.7 through 0.9.x before 0.9.2
Description
The issue is related to incorrect handling of symlinks in multipathd, allowing local users who can access /dev/shm to change symlinks. This could lead to controlled file writes outside of the /dev/shm directory, potentially allowing for local privilege escalation to root. The problem is associated with incorrect symlink handling before accessing a file, which could enable an attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations
For multipath-tools versions 0.7.7 through 0.9.x before 0.9.2, consider updating to version 0.9.2 or later to resolve the issue. As a temporary workaround, restrict access to /dev/shm to minimize the risk of exploitation. Additionally, consider disabling the multipathd service until a patch is applied to prevent potential abuse.
Exploit
Fix
LPE
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Suse
Ubuntu
Multipath-Tools