Use of uninitialized resource in Linux kernel mm

1) Use of uninitialized resource

EUVDB-ID: #VU104773

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49567

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the mpol_rebind_preferred() function in mm/mempolicy.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 5.10 - 5.10.133

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:5.10:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc1:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc2:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc3:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc4:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc5:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc7:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10.3:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/018160ad314d75b1409129b2247b614a9f35894c
https://git.kernel.org/stable/c/13d51565cec1aa432a6ab363edc2bbc53c6f49cb
https://git.kernel.org/stable/c/5735845906fb1d90fe597f8b503fc0a857d475e3
https://git.kernel.org/stable/c/777e563f10e91e91130fe06bee85220d508e7b9b
https://git.kernel.org/stable/c/8c5429a04ccd8dbcc3c753dab2f4126774ec28d4
https://git.kernel.org/stable/c/a1f8765f68bc9bf5744b365bb9f5e0b6db93edfe
https://git.kernel.org/stable/c/aaa1c5d635a6fca2043513ffb5be169f9cd17d9e
https://git.kernel.org/stable/c/ddb3f0b68863bd1c5f43177eea476bce316d4993
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.134

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.