Buffer overflow in Linux kernel - CVE-2022-3077

Vulnerability identifier: #VU71453

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-3077

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handles the I2C_SMBUS_BLOCK_PROC_CALL case. A local user can pass specially crafted data via the  ioctl I2C_SMBUS call, trigger memory corruption and crash the kernel.

Linux kernel
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
kernel (Red Hat package)
kernel-rt (Red Hat package)

Install updates from vendor's website.

Linux kernel - update to 5.19
kernel (Red Hat package) - update to 5.14.0-162.12.1.el9_1
kernel-rt (Red Hat package) - update to 5.14.0-162.12.1.rt21.175.el9_1

• https://github.com/torvalds/linux/commit/690b2549b19563ec5ad53e5c82f6a944d910086e

• Denial of service in Linux kernel Intel iSMT SMBus host controller driver
• Red Hat Enterprise Linux 9 update for kernel
• Red Hat Enterprise Linux 9 update for kernel-rt