PT-2022-7429 · Linux+1 · Linux Kernel+1

Tom Rix · Published 2022-02-15 · Updated 2024-09-25 · CVE-2022-48782

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the mctp route input() function in the Linux kernel's implementation of the Management Component Transport Protocol (MCTP). It involves the reuse of previously freed memory, which could allow an attacker to impact the confidentiality, integrity, and availability of protected information. The problem occurs when mctp key add() fails, and the key is freed but later used in trace mctp key acquire(). To fix this, an else statement should be added to use the key only when mctp key add() is successful.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-06077

CVE-2022-48782

Affected Products

Linux Kernel

Red Os

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48782.json · Exploit
• https://git.kernel.org/stable/c/7e5b6a5c8c44310784c88c1c198dde79f6402f7b · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-48782 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48782 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48782 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48782 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48782 · Vendor Advisory
• https://git.kernel.org/stable/c/1dd3ecbec5f606b2a526c47925c8634b1a6bb81e · Patch
• https://cve.org/CVERecord?id=CVE-2022-48782 · Security Note
• https://bdu.fstec.ru/vul/2024-06077 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48782 · Security Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-25-09-24 · Note
• https://git.kernel.org/linus/7e5b6a5c8c44310784c88c1c198dde79f6402f7b · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.11 · Note