Input validation error in Linux kernel - CVE-2022-21385

Vulnerability identifier: #VU67475

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-21385

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input within the net_rds_alloc_sgs() function in net/rds/message.c in Linux kernel. A local user can perform a denial of service (DoS) attack.

Linux kernel
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Oracle Linux
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Real Time Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Live Patching
openSUSE Leap
Dell Data Protection Central
Dell EMC PowerProtect Data Protection
kgraft-patch-4_12_14-95_108-default
kgraft-patch-4_12_14-122_133-default
kernel-livepatch-4_12_14-150000_150_101-default
kernel-livepatch-4_12_14-150000_150_101-default-debuginfo
kernel-livepatch-4_12_14-150100_197_123-default
kernel-xen-devel
kernel-default
kernel-default-base
kernel-default-devel
kernel-ec2
kernel-ec2-devel
kernel-source
kernel-syms
kernel-trace
kernel-trace-base
kernel-trace-devel
kernel-xen
kernel-xen-base
kernel-ec2-base
kernel-macros
kernel-default-base-debuginfo
kernel-default-debuginfo
kernel-default-debugsource
kernel-devel
kernel-rt_debug
kernel-rt-debugsource
kernel-rt_debug-debuginfo
kernel-rt_debug-debugsource
kernel-rt_debug-devel
kernel-rt_debug-devel-debuginfo
kernel-syms-rt
ocfs2-kmp-rt
ocfs2-kmp-rt-debuginfo
kernel-devel-rt
kernel-source-rt
kernel-rt-devel-debuginfo
kernel-rt-devel
kernel-rt-debuginfo
kernel-rt-base-debuginfo
kernel-rt-base
kernel-rt
gfs2-kmp-rt-debuginfo
gfs2-kmp-rt
dlm-kmp-rt-debuginfo
dlm-kmp-rt
cluster-md-kmp-rt-debuginfo
cluster-md-kmp-rt
kernel-azure-debugsource
kernel-syms-azure
kernel-azure-devel
kernel-azure-debuginfo
kernel-azure-base-debuginfo
kernel-azure-base
kernel-azure
kernel-source-azure
kernel-devel-azure
dlm-kmp-default
cluster-md-kmp-default-debuginfo
cluster-md-kmp-default
kernel-default-kgraft-devel
kernel-default-kgraft
kernel-default-man
kernel-default-devel-debuginfo
dlm-kmp-default-debuginfo
gfs2-kmp-default
gfs2-kmp-default-debuginfo
ocfs2-kmp-default
ocfs2-kmp-default-debuginfo
kernel-obs-build-debugsource
kernel-obs-build
kernel-default-extra-debuginfo
kernel-default-extra
kernel-docs
kernel-vanilla-debuginfo
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
reiserfs-kmp-default-debuginfo
reiserfs-kmp-default
kernel-vanilla-debugsource
kernel-vanilla-base-debuginfo
kernel-vanilla-base
kernel-default-livepatch
kernel-zfcpdump-man
kernel-kvmsmall-base-debuginfo
kernel-kvmsmall-base
kernel-debug-base-debuginfo
kernel-debug-base
kernel-vanilla-livepatch-devel
kernel-vanilla-devel-debuginfo
kernel-vanilla-devel
kernel-vanilla
kernel-default-livepatch-devel
Dell EMC NetWorker vProxy
Dell Secure Connect Gateway

Install updates from vendor's website.

kgraft-patch-4_12_14-95_108-default - update to 1-6.3.1
kgraft-patch-4_12_14-122_133-default - update to 1-8.3.1
kernel-livepatch-4_12_14-150000_150_101-default - update to 1-150000.1.3.1
kernel-livepatch-4_12_14-150000_150_101-default-debuginfo - update to 1-150000.1.3.1
kernel-livepatch-4_12_14-150100_197_123-default - update to 1-150100.3.3.1
kernel-xen-devel - update to 3.0.101-108.138.1
kernel-default - addressed in versions 3.0.101-108.138.1, 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-default-base - addressed in versions 3.0.101-108.138.1, 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-default-devel - addressed in versions 3.0.101-108.138.1, 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-ec2 - update to 3.0.101-108.138.1
kernel-ec2-devel - update to 3.0.101-108.138.1
kernel-source - addressed in versions 3.0.101-108.138.1, 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-syms - addressed in versions 3.0.101-108.138.1, 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-trace - update to 3.0.101-108.138.1
kernel-trace-base - update to 3.0.101-108.138.1
kernel-trace-devel - update to 3.0.101-108.138.1
kernel-xen - update to 3.0.101-108.138.1
kernel-xen-base - update to 3.0.101-108.138.1
kernel-ec2-base - update to 3.0.101-108.138.1
Dell EMC NetWorker vProxy - update to 4.3.0-36
kernel-macros - addressed in versions 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-default-base-debuginfo - addressed in versions 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150100.197.123.1
kernel-default-debuginfo - addressed in versions 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-default-debugsource - addressed in versions 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-devel - addressed in versions 4.4.121-92.188.1, 4.4.180-94.174.1, 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-rt_debug - update to 4.12.14-10.100.1
kernel-rt-debugsource - update to 4.12.14-10.100.1
kernel-rt_debug-debuginfo - update to 4.12.14-10.100.1
kernel-rt_debug-debugsource - update to 4.12.14-10.100.1
kernel-rt_debug-devel - update to 4.12.14-10.100.1
kernel-rt_debug-devel-debuginfo - update to 4.12.14-10.100.1
kernel-syms-rt - update to 4.12.14-10.100.1
ocfs2-kmp-rt - update to 4.12.14-10.100.1
ocfs2-kmp-rt-debuginfo - update to 4.12.14-10.100.1
kernel-devel-rt - update to 4.12.14-10.100.1
kernel-source-rt - update to 4.12.14-10.100.1
kernel-rt-devel-debuginfo - update to 4.12.14-10.100.1
kernel-rt-devel - update to 4.12.14-10.100.1
kernel-rt-debuginfo - update to 4.12.14-10.100.1
kernel-rt-base-debuginfo - update to 4.12.14-10.100.1
kernel-rt-base - update to 4.12.14-10.100.1
kernel-rt - update to 4.12.14-10.100.1
gfs2-kmp-rt-debuginfo - update to 4.12.14-10.100.1
gfs2-kmp-rt - update to 4.12.14-10.100.1
dlm-kmp-rt-debuginfo - update to 4.12.14-10.100.1
dlm-kmp-rt - update to 4.12.14-10.100.1
cluster-md-kmp-rt-debuginfo - update to 4.12.14-10.100.1
cluster-md-kmp-rt - update to 4.12.14-10.100.1
kernel-azure-debugsource - update to 4.12.14-16.109.1
kernel-syms-azure - update to 4.12.14-16.109.1
kernel-azure-devel - update to 4.12.14-16.109.1
kernel-azure-debuginfo - update to 4.12.14-16.109.1
kernel-azure-base-debuginfo - update to 4.12.14-16.109.1
kernel-azure-base - update to 4.12.14-16.109.1
kernel-azure - update to 4.12.14-16.109.1
kernel-source-azure - update to 4.12.14-16.109.1
kernel-devel-azure - update to 4.12.14-16.109.1
dlm-kmp-default - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
cluster-md-kmp-default-debuginfo - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
cluster-md-kmp-default - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-default-kgraft-devel - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1
kernel-default-kgraft - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1
kernel-default-man - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-default-devel-debuginfo - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
dlm-kmp-default-debuginfo - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
gfs2-kmp-default - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
gfs2-kmp-default-debuginfo - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
ocfs2-kmp-default - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
ocfs2-kmp-default-debuginfo - addressed in versions 4.12.14-95.108.1, 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-obs-build-debugsource - addressed in versions 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-obs-build - addressed in versions 4.12.14-122.133.1, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-default-extra-debuginfo - update to 4.12.14-122.133.1
kernel-default-extra - update to 4.12.14-122.133.1
kernel-docs - addressed in versions 4.12.14-122.133.2, 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-vanilla-debuginfo - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-zfcpdump-debugsource - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-zfcpdump-debuginfo - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
reiserfs-kmp-default-debuginfo - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
reiserfs-kmp-default - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-vanilla-debugsource - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-vanilla-base-debuginfo - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-vanilla-base - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-default-livepatch - addressed in versions 4.12.14-150000.150.101.1, 4.12.14-150100.197.123.1
kernel-zfcpdump-man - update to 4.12.14-150100.197.123.1
kernel-kvmsmall-base-debuginfo - update to 4.12.14-150100.197.123.1
kernel-kvmsmall-base - update to 4.12.14-150100.197.123.1
kernel-debug-base-debuginfo - update to 4.12.14-150100.197.123.1
kernel-debug-base - update to 4.12.14-150100.197.123.1
kernel-vanilla-livepatch-devel - update to 4.12.14-150100.197.123.1
kernel-vanilla-devel-debuginfo - update to 4.12.14-150100.197.123.1
kernel-vanilla-devel - update to 4.12.14-150100.197.123.1
kernel-vanilla - update to 4.12.14-150100.197.123.1
kernel-default-livepatch-devel - update to 4.12.14-150100.197.123.1
Dell Secure Connect Gateway - update to 5.14.00.16

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea010070d0a7497253d5a6f919f6dd107450b31a

• Denial of service Linux kernel RDS
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Dell EMC Data Protection Central
• Multiple vulnerabilities in Dell NetWorker vProxy
• Multiple vulnerabilities in Dell Secure Connect Gateway
• SUSE update for the Linux Kernel