CVE-2022-24122

HIGH

7.8

Description

kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published1/29/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

fedoraproject:fedoralinux:linux_kernelnetapp:h300enetapp:h300e_firmwarenetapp:h300snetapp:h300s_firmwarenetapp:h410cnetapp:h410c_firmwarenetapp:h410snetapp:h410s_firmwarenetapp:h500enetapp:h500e_firmwarenetapp:h500snetapp:h500s_firmwarenetapp:h700enetapp:h700e_firmwarenetapp:h700snetapp:h700s_firmware

Weaknesses (CWE)

CWE-416

References

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f9d87929d451d3e649699d0f1d74f71f77ad38f5(cve@mitre.org)

https://github.com/torvalds/linux/commit/f9d87929d451d3e649699d0f1d74f71f77ad38f5(cve@mitre.org)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSR3AI2IQGRKZCHNKF6S25JGDKUEAWWL/(cve@mitre.org)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVSZKUJAZ2VN6LJ35J2B6YD6BOPQTU3B/(cve@mitre.org)

https://security.netapp.com/advisory/ntap-20220221-0001/(cve@mitre.org)

https://www.openwall.com/lists/oss-security/2022/01/29/1(cve@mitre.org)

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f9d87929d451d3e649699d0f1d74f71f77ad38f5(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/torvalds/linux/commit/f9d87929d451d3e649699d0f1d74f71f77ad38f5(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSR3AI2IQGRKZCHNKF6S25JGDKUEAWWL/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVSZKUJAZ2VN6LJ35J2B6YD6BOPQTU3B/(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20220221-0001/(af854a3a-2127-422b-91ae-364da2661108)

https://www.openwall.com/lists/oss-security/2022/01/29/1(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.