Memory leak in Linux kernel - CVE-2022-3543

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU69798

Memory leak in Linux kernel - CVE-2022-3543

Published: December 1, 2022


Vulnerability identifier: #VU69798
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-3543
CWE-ID: CWE-401
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a DoS attack.

The vulnerability exists due memory leak within the unix_sock_destructor/unix_release_sock() function in net/unix/af_unix.c. A local user can force the system to leak memory and perform denial of service attack.


Affected software

Linux kernel
Amazon Linux AMI
Slackware Linux
Ubuntu
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-5.15.0-60-generic-64k (Ubuntu package)
linux-image-5.15.0-60-generic-lpae (Ubuntu package)
linux-image-5.15.0-60-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-60-lowlatency (Ubuntu package)
linux-image-5.15.0-60-generic (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.15.0-1015-gkeop (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1024-raspi (Ubuntu package)
linux-image-5.15.0-1024-raspi-nolpae (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1025-ibm (Ubuntu package)
linux-image-5.15.0-1025-intel-iotg (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1027-gke (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.15.0-1028-kvm (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1029-oracle (Ubuntu package)
linux-image-5.15.0-1029-gcp (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1030-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.15.0-1033-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-5.15.0-1033-azure (Ubuntu package)
linux-5.15.80/kernel-generic
linux-5.15.80/kernel-huge
linux-5.15.80/kernel-modules
linux-5.15.80/kernel-headers
linux-image-oem-22.04 (Ubuntu package)
linux-image-5.19.0-28-generic-64k (Ubuntu package)
linux-image-5.19.0-28-generic-lpae (Ubuntu package)
linux-image-5.19.0-28-generic (Ubuntu package)
linux-image-5.19.0-1011-raspi (Ubuntu package)
linux-image-5.19.0-1011-raspi-nolpae (Ubuntu package)
linux-image-5.19.0-1014-lowlatency-64k (Ubuntu package)
linux-image-5.19.0-1014-lowlatency (Ubuntu package)
linux-image-5.19.0-1014-gcp (Ubuntu package)
linux-image-5.19.0-1014-ibm (Ubuntu package)
linux-image-5.19.0-1014-oracle (Ubuntu package)
linux-image-5.19.0-1015-kvm (Ubuntu package)
linux-image-5.19.0-1016-aws (Ubuntu package)
linux-image-5.19.0-1016-azure (Ubuntu package)
kernel
linux-image-intel-iotg (Ubuntu package)

How to mitigate CVE-2022-3543

Install updates from vendor's website.

Linux kernel - update to 6.1
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package) - addressed in versions 5.15.0.60.53, 5.19.0.1014.11
linux-image-lowlatency-hwe-22.04 (Ubuntu package) - addressed in versions 5.15.0.60.53, 5.19.0.1014.11
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.60.53, 5.19.0.1014.11
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.60.53, 5.19.0.1014.11
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.60.58, 5.19.0.28.25
linux-image-virtual-hwe-22.04 (Ubuntu package) - addressed in versions 5.15.0.60.58, 5.19.0.28.25
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.60.58, 5.19.0.28.25
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.60.58, 5.19.0.28.25
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - addressed in versions 5.15.0.60.58, 5.19.0.28.25
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - addressed in versions 5.15.0.60.58, 5.19.0.28.25
linux-image-generic-hwe-22.04 (Ubuntu package) - addressed in versions 5.15.0.60.58, 5.19.0.28.25
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.60.58, 5.19.0.28.25
linux-image-5.15.0-60-generic-64k (Ubuntu package) - update to 5.15.0-60.66~20.04.1
linux-image-5.15.0-60-generic-lpae (Ubuntu package) - update to 5.15.0-60.66~20.04.1
linux-image-5.15.0-60-lowlatency-64k (Ubuntu package) - update to 5.15.0-60.66~20.04.1
linux-image-5.15.0-60-lowlatency (Ubuntu package) - update to 5.15.0-60.66~20.04.1
linux-image-5.15.0-60-generic (Ubuntu package) - update to 5.15.0-60.66~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.60.66~20.04.23
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.60.66~20.04.23
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.60.66~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.60.66~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.60.66~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.60.66~20.04.26
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1015.14
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1015.14
linux-image-5.15.0-1015-gkeop (Ubuntu package) - update to 5.15.0-1015.19
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1024.21, 5.19.0.1011.10
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1024.21, 5.19.0.1011.10
linux-image-5.15.0-1024-raspi (Ubuntu package) - update to 5.15.0-1024.26
linux-image-5.15.0-1024-raspi-nolpae (Ubuntu package) - update to 5.15.0-1024.26
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1025.21, 5.19.0.1014.11
linux-image-intel-iotg (Ubuntu package) - update to 5.15.0.1025.24
linux-image-5.15.0-1025-ibm (Ubuntu package) - update to 5.15.0-1025.28
linux-image-5.15.0-1025-intel-iotg (Ubuntu package) - update to 5.15.0-1025.30
linux-image-gke-5.15 (Ubuntu package) - addressed in versions 5.15.0.1027.26, 5.15.0.1027.32~20.04.1
linux-image-gke (Ubuntu package) - update to 5.15.0.1027.26
linux-image-5.15.0-1027-gke (Ubuntu package) - addressed in versions 5.15.0-1027.32, 5.15.0-1027.32~20.04.1
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1028.24, 5.19.0.1015.12
linux-image-5.15.0-1028-kvm (Ubuntu package) - update to 5.15.0-1028.33
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1029.24, 5.15.0.1029.35~20.04.1, 5.19.0.1014.11
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1029.24, 5.15.0.1029.36~20.04.1, 5.19.0.1014.11
linux-image-5.15.0-1029-oracle (Ubuntu package) - update to 5.15.0-1029.35~20.04.1
linux-image-5.15.0-1029-gcp (Ubuntu package) - addressed in versions 5.15.0-1029.36, 5.15.0-1029.36~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1030.28, 5.15.0.1030.34~20.04.19, 5.19.0.1016.13
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1030.28
linux-image-5.15.0-1030-aws (Ubuntu package) - addressed in versions 5.15.0-1030.34, 5.15.0-1030.34~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1033.29
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1033.29, 5.15.0.1033.40~20.04.23, 5.19.0.1016.12
linux-image-5.15.0-1033-azure-fde (Ubuntu package) - update to 5.15.0-1033.40.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1033.40.10
linux-image-5.15.0-1033-azure (Ubuntu package) - update to 5.15.0-1033.40~20.04.1
linux-5.15.80/kernel-generic - update to 5.15.80
linux-5.15.80/kernel-huge - update to 5.15.80
linux-5.15.80/kernel-modules - update to 5.15.80
linux-5.15.80/kernel-headers - update to 5.15.80_smp
linux-image-oem-22.04 (Ubuntu package) - update to 5.19.0.28.25
linux-image-5.19.0-28-generic-64k (Ubuntu package) - update to 5.19.0-28.29
linux-image-5.19.0-28-generic-lpae (Ubuntu package) - update to 5.19.0-28.29
linux-image-5.19.0-28-generic (Ubuntu package) - update to 5.19.0-28.29
linux-image-5.19.0-1011-raspi (Ubuntu package) - update to 5.19.0-1011.18
linux-image-5.19.0-1011-raspi-nolpae (Ubuntu package) - update to 5.19.0-1011.18
linux-image-5.19.0-1014-lowlatency-64k (Ubuntu package) - update to 5.19.0-1014.15
linux-image-5.19.0-1014-lowlatency (Ubuntu package) - update to 5.19.0-1014.15
linux-image-5.19.0-1014-gcp (Ubuntu package) - update to 5.19.0-1014.15
linux-image-5.19.0-1014-ibm (Ubuntu package) - update to 5.19.0-1014.15
linux-image-5.19.0-1014-oracle (Ubuntu package) - update to 5.19.0-1014.16
linux-image-5.19.0-1015-kvm (Ubuntu package) - update to 5.19.0-1015.16
linux-image-5.19.0-1016-aws (Ubuntu package) - update to 5.19.0-1016.17
linux-image-5.19.0-1016-azure (Ubuntu package) - update to 5.19.0-1016.17
kernel - update to 6.1.10-15.42

External References

Related Security Bulletins