Out-of-bounds write in Linux kernel - CVE-2022-1015

Vulnerability identifier: #VU62027

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear

CVE-ID: CVE-2022-1015

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: Public exploit is available

Affected software:
Linux kernel
Amazon Linux AMI
Slackware Linux
Ubuntu
openEuler
Oracle VM Server for x86
python3-perf
perf-debuginfo
kernel-tools-debuginfo
kernel-source
kernel-debuginfo
kernel-tools-devel
kernel-tools
python3-perf-debuginfo
kernel-headers
bpftool-debuginfo
perf
kernel-devel
bpftool
kernel-debugsource
kernel
linux-image-5.13.0-40-generic-64k (Ubuntu package)
linux-image-5.13.0-40-lowlatency (Ubuntu package)
linux-image-5.13.0-40-generic-lpae (Ubuntu package)
linux-image-5.13.0-40-generic (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.13.0-1021-kvm (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.13.0-1022-aws (Ubuntu package)
linux-image-5.13.0-1022-azure (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.13.0-1024-gcp (Ubuntu package)
linux-image-5.13.0-1025-raspi-nolpae (Ubuntu package)
linux-image-5.13.0-1025-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.13.0-1027-oracle (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-5.14.0-1033-oem (Ubuntu package)
linux-image-5.15.0-27-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-27-lowlatency (Ubuntu package)
linux-image-5.15.0-27-generic-lpae (Ubuntu package)
linux-image-5.15.0-27-generic (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-27-generic-64k (Ubuntu package)
linux-image-5.15.0-1003-ibm (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1004-gcp (Ubuntu package)
linux-image-5.15.0-1006-raspi (Ubuntu package)
linux-image-5.15.0-1006-raspi-nolpae (Ubuntu package)
linux-5.15.38/kernel-huge
linux-5.15.38/kernel-generic
linux-5.15.38/kernel-headers
linux-5.15.38/kernel-modules

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the nft_validate_register_store and nft_validate_register_load in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. A local user can escalate privileges on the system.

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://bugzilla.redhat.com/show_bug.cgi?id=2065323