Reachable Assertion in Linux kernel - CVE-2022-0644

Vulnerability identifier: #VU63860

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-0644

CWE-ID: CWE-617

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion error in the Linux kernel’s kernel_read_file_from_fd in the filesystem. A local user can attempt to read a file without read access/permission to perform a denial of service (DoS) attack.

Linux kernel
Debian Linux
SUSE Linux Enterprise Micro
Anolis OS
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Real Time
Dell Secure Connect Gateway
python-perf
perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-tools
kernel-headers
kernel-devel
kernel-debug-devel
kernel-debug
kernel
bpftool
linux (Debian package)
kernel-syms-rt
dlm-kmp-rt-debuginfo
ocfs2-kmp-rt-debuginfo
ocfs2-kmp-rt
kernel-rt_debug-devel-debuginfo
kernel-rt_debug-devel
kernel-rt_debug-debugsource
kernel-rt_debug-debuginfo
kernel-rt_debug
kernel-rt-devel-debuginfo
kernel-rt-devel
kernel-rt-debugsource
kernel-rt-debuginfo
kernel-rt
gfs2-kmp-rt-debuginfo
gfs2-kmp-rt
dlm-kmp-rt
cluster-md-kmp-rt-debuginfo
cluster-md-kmp-rt
kernel-source-rt
kernel-devel-rt

Install updates from vendor's website.

Linux kernel - update to 5.15 rc7
Dell Secure Connect Gateway - update to 5.12.00.10
python-perf - update to 4.19.91-26
perf - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
kernel-tools-libs - update to 4.19.91-26
kernel-tools - update to 4.19.91-26
kernel-headers - update to 4.19.91-26
kernel-devel - update to 4.19.91-26
kernel-debug-devel - update to 4.19.91-26
kernel-debug - update to 4.19.91-26
kernel - update to 4.19.91-26
bpftool - update to 4.19.91-26
linux (Debian package) - update to 4.19.232-1
kernel-syms-rt - addressed in versions 5.3.18-150200.79.1, 5.3.18-150300.82.1
dlm-kmp-rt-debuginfo - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
ocfs2-kmp-rt-debuginfo - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
ocfs2-kmp-rt - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt_debug-devel-debuginfo - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt_debug-devel - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt_debug-debugsource - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt_debug-debuginfo - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt_debug - update to 5.3.18-150200.79.2
kernel-rt-devel-debuginfo - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt-devel - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt-debugsource - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt-debuginfo - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-rt - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
gfs2-kmp-rt-debuginfo - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
gfs2-kmp-rt - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
dlm-kmp-rt - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
cluster-md-kmp-rt-debuginfo - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
cluster-md-kmp-rt - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-source-rt - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1
kernel-devel-rt - addressed in versions 5.3.18-150200.79.2, 5.3.18-150300.82.1

• https://www.debian.org/security/2022/dsa-5096
• https://bugzilla.redhat.com/show_bug.cgi?id=2026491

• Multiple vulnerabilities in DELL Secure Connect Gateway Security
• Debian update for linux
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Anolis OS update for kernel(ANCK)4.19