NULL pointer dereference in Linux kernel - CVE-2022-0286

Vulnerability identifier: #VU63925

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-0286

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the Linux kernel’s bonding driver when user bonds non existing or fake device. A local user can perform a denial of service (DoS) attack.

Linux kernel
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Anolis OS
Migration Toolkit for Containers
Red Hat Advanced Cluster Management for Kubernetes
IBM Spectrum Protect Plus
kernel-doc
kernel-abi-stablelists
python3-perf
perf
kernel-tools-libs
kernel-tools
kernel-modules-extra
kernel-modules
kernel-headers
kernel-devel
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-cross-headers
kernel-core
kernel
bpftool
kernel (Red Hat package)
kernel-rt (Red Hat package)

Install update from vendor's website.

Linux kernel - update to 5.14 rc2
Migration Toolkit for Containers - addressed in versions 1.6.5, 1.7.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.11, 2.4.5, 2.5.0
kernel-doc - update to 4.18.0-372.9.1
kernel-abi-stablelists - update to 4.18.0-372.9.1
python3-perf - update to 4.18.0-372.9.1
perf - update to 4.18.0-372.9.1
kernel-tools-libs - update to 4.18.0-372.9.1
kernel-tools - update to 4.18.0-372.9.1
kernel-modules-extra - update to 4.18.0-372.9.1
kernel-modules - update to 4.18.0-372.9.1
kernel-headers - update to 4.18.0-372.9.1
kernel-devel - update to 4.18.0-372.9.1
kernel-debug-modules-extra - update to 4.18.0-372.9.1
kernel-debug-modules - update to 4.18.0-372.9.1
kernel-debug-devel - update to 4.18.0-372.9.1
kernel-debug-core - update to 4.18.0-372.9.1
kernel-debug - update to 4.18.0-372.9.1
kernel-cross-headers - update to 4.18.0-372.9.1
kernel-core - update to 4.18.0-372.9.1
kernel - update to 4.18.0-372.9.1
bpftool - update to 4.18.0-372.9.1
kernel (Red Hat package) - update to 4.18.0-372.9.1.el8
kernel-rt (Red Hat package) - update to 4.18.0-372.9.1.rt7.166.el8
IBM Spectrum Protect Plus - update to 10.1.11

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=105cd17a866017b45f3c45901b394c711c97bf40
• https://syzkaller.appspot.com/bug?id=160f641886d88bf11cbf1236cc4db994bb210626
• https://bugzilla.redhat.com/show_bug.cgi?id=2037019

• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.3
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC)
• Red Hat Enterprise Linux 8 update for kernel-rt
• Red Hat Enterprise Linux 8 update for kernel
• Multiple vulnerabilities in Migration Toolkit for Containers 1.6
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Anolis OS update for kernel