Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 2 |
CVE-ID | CVE-2022-1012 CVE-2022-32250 |
CWE-ID | CWE-401 CWE-416 |
Exploitation vector | Network |
Public exploit | Public exploit code for vulnerability #2 is available. |
Vulnerable software Subscribe |
kernel (Red Hat package) Operating systems & Components / Operating system package or component Red Hat Enterprise Linux Server - TUS Operating systems & Components / Operating system Red Hat Virtualization Host Web applications / Remote management & hosting panels |
Vendor | Red Hat Inc. |
This security bulletin contains information about 2 vulnerabilities.
EUVDB-ID: #VU64079
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2022-1012
CWE-ID:
CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to insufficient randomization in the net/ipv4/tcp.c when calculating port offsets in Linux kernel cause by small table perturb size. A remote attacker can cause memory leak and gain access to sensitive information.
MitigationInstall updates from vendor's website.
Vulnerable software versionskernel (Red Hat package): 4.18.0-372.16.1.el8_6
Red Hat Enterprise Linux Server - TUS: 8.6
Red Hat Virtualization Host: 4
http://access.redhat.com/errata/RHSA-2022:5819
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
EUVDB-ID: #VU64668
Risk: Low
CVSSv3.1:
CVE-ID: CVE-2022-32250
CWE-ID:
CWE-416 - Use After Free
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free incorrect NFT_STATEFUL_EXPR in net/netfilter/nf_tables_api.c in Linux kernel. A local user with ability to create user/net namespaces can execute arbitrary code with root privileges.
Install updates from vendor's website.
Vulnerable software versionskernel (Red Hat package): 4.18.0-372.16.1.el8_6
Red Hat Enterprise Linux Server - TUS: 8.6
Red Hat Virtualization Host: 4
http://access.redhat.com/errata/RHSA-2022:5819
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?