PT-2022-7495 · Linux+1 · Linux Kernel+1
Jianglei Nie
·
Published
2022-03-10
·
Updated
2024-08-29
·
CVE-2022-48854
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a use after free vulnerability in the arc emac component of the Linux kernel. This vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of data. The vulnerability occurs when
bus->state is equal to MDIOBUS ALLOCATED, and mdiobus free(bus) frees the "bus", but bus->name is still used in the next line, leading to a use after free. The arc mdio probe() function is specifically affected. To fix this, the name can be put in a local variable, and bus->name can be made to point to the rodata section "name", then use the name in the error message without referring to bus to avoid the use after free.Recommendations
As a temporary workaround, consider disabling the
arc mdio probe() function until a patch is available. Restrict access to the vulnerable arc emac component to minimize the risk of exploitation. Avoid using the bus->name variable in the affected code until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Os