openEuler 20.03 LTS SP1 update for kernel



Risk Low
Patch available YES
Number of vulnerabilities 7
CVE-ID CVE-2022-40768
CVE-2022-3621
CVE-2022-3635
CVE-2022-43750
CVE-2022-3629
CVE-2022-3646
CVE-2022-3586
CWE-ID CWE-284
CWE-476
CWE-416
CWE-787
CWE-401
Exploitation vector Network
Public exploit N/A
Vulnerable software
 openEuler
Operating systems & Components / Operating system

perf
Operating systems & Components / Operating system package or component

python3-perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools
Operating systems & Components / Operating system package or component

python2-perf-debuginfo
Operating systems & Components / Operating system package or component

perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools-devel
Operating systems & Components / Operating system package or component

kernel-tools-debuginfo
Operating systems & Components / Operating system package or component

kernel-source
Operating systems & Components / Operating system package or component

bpftool
Operating systems & Components / Operating system package or component

kernel-debugsource
Operating systems & Components / Operating system package or component

bpftool-debuginfo
Operating systems & Components / Operating system package or component

python3-perf
Operating systems & Components / Operating system package or component

kernel-debuginfo
Operating systems & Components / Operating system package or component

kernel-devel
Operating systems & Components / Operating system package or component

python2-perf
Operating systems & Components / Operating system package or component

kernel
Operating systems & Components / Operating system package or component

Vendor openEuler

Security Bulletin

This security bulletin contains information about 7 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU67587

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-40768

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to improper access restrictions in the drivers/scsi/stex.c in the Linux kernel. A local user can obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

perf: before 4.19.90-2211.1.0.0175

python3-perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools: before 4.19.90-2211.1.0.0175

python2-perf-debuginfo: before 4.19.90-2211.1.0.0175

perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools-devel: before 4.19.90-2211.1.0.0175

kernel-tools-debuginfo: before 4.19.90-2211.1.0.0175

kernel-source: before 4.19.90-2211.1.0.0175

bpftool: before 4.19.90-2211.1.0.0175

kernel-debugsource: before 4.19.90-2211.1.0.0175

bpftool-debuginfo: before 4.19.90-2211.1.0.0175

python3-perf: before 4.19.90-2211.1.0.0175

kernel-debuginfo: before 4.19.90-2211.1.0.0175

kernel-devel: before 4.19.90-2211.1.0.0175

python2-perf: before 4.19.90-2211.1.0.0175

kernel: before 4.19.90-2211.1.0.0175

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2036


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) NULL pointer dereference

EUVDB-ID: #VU69300

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3621

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the nilfs2 filesystem driver within the nilfs_bmap_lookup_at_level() function in fs/nilfs2/inode.c in Linux kernel. A remote attacker can trick the victim into mounting a specially crafted image and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

perf: before 4.19.90-2211.1.0.0175

python3-perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools: before 4.19.90-2211.1.0.0175

python2-perf-debuginfo: before 4.19.90-2211.1.0.0175

perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools-devel: before 4.19.90-2211.1.0.0175

kernel-tools-debuginfo: before 4.19.90-2211.1.0.0175

kernel-source: before 4.19.90-2211.1.0.0175

bpftool: before 4.19.90-2211.1.0.0175

kernel-debugsource: before 4.19.90-2211.1.0.0175

bpftool-debuginfo: before 4.19.90-2211.1.0.0175

python3-perf: before 4.19.90-2211.1.0.0175

kernel-debuginfo: before 4.19.90-2211.1.0.0175

kernel-devel: before 4.19.90-2211.1.0.0175

python2-perf: before 4.19.90-2211.1.0.0175

kernel: before 4.19.90-2211.1.0.0175

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2036


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU69398

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3635

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the drivers/atm/idt77252.c in IPsec component of Linux kernel. A local user can trigger a use-after-free error and crash the kernel.


Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

perf: before 4.19.90-2211.1.0.0175

python3-perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools: before 4.19.90-2211.1.0.0175

python2-perf-debuginfo: before 4.19.90-2211.1.0.0175

perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools-devel: before 4.19.90-2211.1.0.0175

kernel-tools-debuginfo: before 4.19.90-2211.1.0.0175

kernel-source: before 4.19.90-2211.1.0.0175

bpftool: before 4.19.90-2211.1.0.0175

kernel-debugsource: before 4.19.90-2211.1.0.0175

bpftool-debuginfo: before 4.19.90-2211.1.0.0175

python3-perf: before 4.19.90-2211.1.0.0175

kernel-debuginfo: before 4.19.90-2211.1.0.0175

kernel-devel: before 4.19.90-2211.1.0.0175

python2-perf: before 4.19.90-2211.1.0.0175

kernel: before 4.19.90-2211.1.0.0175

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2036


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Out-of-bounds write

EUVDB-ID: #VU69296

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-43750

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

perf: before 4.19.90-2211.1.0.0175

python3-perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools: before 4.19.90-2211.1.0.0175

python2-perf-debuginfo: before 4.19.90-2211.1.0.0175

perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools-devel: before 4.19.90-2211.1.0.0175

kernel-tools-debuginfo: before 4.19.90-2211.1.0.0175

kernel-source: before 4.19.90-2211.1.0.0175

bpftool: before 4.19.90-2211.1.0.0175

kernel-debugsource: before 4.19.90-2211.1.0.0175

bpftool-debuginfo: before 4.19.90-2211.1.0.0175

python3-perf: before 4.19.90-2211.1.0.0175

kernel-debuginfo: before 4.19.90-2211.1.0.0175

kernel-devel: before 4.19.90-2211.1.0.0175

python2-perf: before 4.19.90-2211.1.0.0175

kernel: before 4.19.90-2211.1.0.0175

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2036


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Memory leak

EUVDB-ID: #VU69706

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3629

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform DoS attack.

The vulnerability exists due memory leak within the vsock_connect() function in net/vmw_vsock/af_vsock.c in Linux kernel IPSec implementation. A local user can force the system to leak memory and perform denial of service attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

perf: before 4.19.90-2211.1.0.0175

python3-perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools: before 4.19.90-2211.1.0.0175

python2-perf-debuginfo: before 4.19.90-2211.1.0.0175

perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools-devel: before 4.19.90-2211.1.0.0175

kernel-tools-debuginfo: before 4.19.90-2211.1.0.0175

kernel-source: before 4.19.90-2211.1.0.0175

bpftool: before 4.19.90-2211.1.0.0175

kernel-debugsource: before 4.19.90-2211.1.0.0175

bpftool-debuginfo: before 4.19.90-2211.1.0.0175

python3-perf: before 4.19.90-2211.1.0.0175

kernel-debuginfo: before 4.19.90-2211.1.0.0175

kernel-devel: before 4.19.90-2211.1.0.0175

python2-perf: before 4.19.90-2211.1.0.0175

kernel: before 4.19.90-2211.1.0.0175

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2036


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) NULL pointer dereference

EUVDB-ID: #VU69299

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3646

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the nilfs2 filesystem driver within the nilfs_attach_log_writer() function in fs/nilfs2/segment.c in Linux kernel. A remote attacker can trick the victim into mounting a specially crafted image and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

perf: before 4.19.90-2211.1.0.0175

python3-perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools: before 4.19.90-2211.1.0.0175

python2-perf-debuginfo: before 4.19.90-2211.1.0.0175

perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools-devel: before 4.19.90-2211.1.0.0175

kernel-tools-debuginfo: before 4.19.90-2211.1.0.0175

kernel-source: before 4.19.90-2211.1.0.0175

bpftool: before 4.19.90-2211.1.0.0175

kernel-debugsource: before 4.19.90-2211.1.0.0175

bpftool-debuginfo: before 4.19.90-2211.1.0.0175

python3-perf: before 4.19.90-2211.1.0.0175

kernel-debuginfo: before 4.19.90-2211.1.0.0175

kernel-devel: before 4.19.90-2211.1.0.0175

python2-perf: before 4.19.90-2211.1.0.0175

kernel: before 4.19.90-2211.1.0.0175

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2036


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU69708

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3586

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

perf: before 4.19.90-2211.1.0.0175

python3-perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools: before 4.19.90-2211.1.0.0175

python2-perf-debuginfo: before 4.19.90-2211.1.0.0175

perf-debuginfo: before 4.19.90-2211.1.0.0175

kernel-tools-devel: before 4.19.90-2211.1.0.0175

kernel-tools-debuginfo: before 4.19.90-2211.1.0.0175

kernel-source: before 4.19.90-2211.1.0.0175

bpftool: before 4.19.90-2211.1.0.0175

kernel-debugsource: before 4.19.90-2211.1.0.0175

bpftool-debuginfo: before 4.19.90-2211.1.0.0175

python3-perf: before 4.19.90-2211.1.0.0175

kernel-debuginfo: before 4.19.90-2211.1.0.0175

kernel-devel: before 4.19.90-2211.1.0.0175

python2-perf: before 4.19.90-2211.1.0.0175

kernel: before 4.19.90-2211.1.0.0175

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-2036


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###