NULL pointer dereference in Linux kernel - CVE-2022-4842

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU72467

NULL pointer dereference in Linux kernel - CVE-2022-4842

Published: February 21, 2023


Vulnerability identifier: #VU72467
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-4842
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the attr_punch_hole() () function in Linux kernel NTFS3 driver. A local user can perform a denial of service (DoS) attack.


Affected software

Linux kernel
Amazon Linux AMI
Slackware Linux
Ubuntu
openEuler
kernel-debuginfo
kernel-devel
kernel-tools
perf
kernel-tools-debuginfo
kernel-tools-devel
kernel
python3-perf-debuginfo
python3-perf
bpftool-debuginfo
kernel-source
kernel-headers
kernel-debugsource
bpftool
perf-debuginfo
linux-image-virtual (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-5.15.0-70-generic-lpae (Ubuntu package)
linux-image-5.15.0-70-lowlatency (Ubuntu package)
linux-image-5.15.0-70-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-70-generic (Ubuntu package)
linux-image-5.15.0-70-generic-64k (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1018-gkeop (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1027-raspi (Ubuntu package)
linux-image-5.15.0-1027-raspi-nolpae (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1028-ibm (Ubuntu package)
linux-image-5.15.0-1028-intel-iotg (Ubuntu package)
linux-image-5.15.0-1030-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1031-gke (Ubuntu package)
linux-image-5.15.0-1031-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1032-gcp (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1033-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1034-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.15.0-1036-azure (Ubuntu package)
linux-image-5.15.0-1036-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-5.15.94/kernel-generic
linux-5.15.94/kernel-huge
linux-5.15.94/kernel-modules
linux-5.15.94/kernel-headers
linux-image-oem-22.04 (Ubuntu package)
linux-image-oem-22.04a (Ubuntu package)
linux-image-5.17.0-1034-oem (Ubuntu package)
linux-image-5.19.0-42-generic (Ubuntu package)
linux-image-5.19.0-42-generic-lpae (Ubuntu package)
linux-image-5.19.0-42-generic-64k (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-5.19.0-1018-raspi-nolpae (Ubuntu package)
linux-image-5.19.0-1018-raspi (Ubuntu package)
linux-image-5.19.0-1022-ibm (Ubuntu package)
linux-image-5.19.0-1023-kvm (Ubuntu package)
linux-image-5.19.0-1023-oracle (Ubuntu package)
linux-image-5.19.0-1024-lowlatency-64k (Ubuntu package)
linux-image-5.19.0-1024-lowlatency (Ubuntu package)
linux-image-5.19.0-1024-gcp (Ubuntu package)
linux-image-5.19.0-1025-aws (Ubuntu package)
linux-image-5.19.0-1026-azure (Ubuntu package)
linux-image-oem-22.04b (Ubuntu package)
linux-image-6.0.0-1019-oem (Ubuntu package)
linux-image-oem-22.04c (Ubuntu package)
linux-image-6.1.0-1008-oem (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

How to mitigate CVE-2022-4842

Install update from vendor's website.

kernel-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-devel - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-tools - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
perf - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-tools-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-tools-devel - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
python3-perf-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
python3-perf - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
bpftool-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-source - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-headers - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
kernel-debugsource - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
bpftool - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
perf-debuginfo - addressed in versions 5.10.0-60.78.0.102, 5.10.0-136.15.0.91
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.70.68, 5.19.0.42.38
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.70.68, 5.19.0.42.38
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.70.68, 5.19.0.42.38
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.70.68, 5.19.0.42.38
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.70.75, 5.19.0.1024.20
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.70.75, 5.19.0.1024.20
linux-image-5.15.0-70-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-70.77, 5.15.0-70.77~20.04.1
linux-image-5.15.0-70-lowlatency (Ubuntu package) - addressed in versions 5.15.0-70.77, 5.15.0-70.77~20.04.1
linux-image-5.15.0-70-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-70.77, 5.15.0-70.77~20.04.1
linux-image-5.15.0-70-generic (Ubuntu package) - addressed in versions 5.15.0-70.77, 5.15.0-70.77~20.04.1
linux-image-5.15.0-70-generic-64k (Ubuntu package) - addressed in versions 5.15.0-70.77, 5.15.0-70.77~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.70.77~20.04.28
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.70.77~20.04.28
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.70.77~20.04.31
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.70.77~20.04.31
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.70.77~20.04.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.70.77~20.04.31
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.70.77~20.04.31
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.70.77~20.04.31
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.70.77~20.04.31
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.70.77~20.04.31
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1018.17
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1018.17
linux-image-5.15.0-1018-gkeop (Ubuntu package) - update to 5.15.0-1018.23
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1027.24, 5.19.0.1018.17
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1027.24, 5.19.0.1018.17
linux-image-5.15.0-1027-raspi (Ubuntu package) - update to 5.15.0-1027.29
linux-image-5.15.0-1027-raspi-nolpae (Ubuntu package) - update to 5.15.0-1027.29
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1028.24, 5.19.0.1022.19
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1028.27, 5.15.0.1030.35~20.04.22
linux-image-5.15.0-1028-ibm (Ubuntu package) - update to 5.15.0-1028.31
linux-image-5.15.0-1028-intel-iotg (Ubuntu package) - update to 5.15.0-1028.33
linux-image-5.15.0-1030-intel-iotg (Ubuntu package) - update to 5.15.0-1030.35~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1030.35~20.04.22
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1031.27, 5.19.0.1023.20
linux-image-gke-5.15 (Ubuntu package) - addressed in versions 5.15.0.1031.30, 5.15.0.1031.36~20.04.1
linux-image-gke (Ubuntu package) - update to 5.15.0.1031.30
linux-image-5.15.0-1031-gke (Ubuntu package) - addressed in versions 5.15.0-1031.36, 5.15.0-1031.36~20.04.1
linux-image-5.15.0-1031-kvm (Ubuntu package) - update to 5.15.0-1031.36
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1032.27, 5.15.0.1032.40~20.04.1, 5.19.0.1024.20
linux-image-5.15.0-1032-gcp (Ubuntu package) - addressed in versions 5.15.0-1032.40, 5.15.0-1032.40~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1033.28, 5.15.0.1033.39~20.04.1, 5.19.0.1023.19
linux-image-5.15.0-1033-oracle (Ubuntu package) - addressed in versions 5.15.0-1033.39, 5.15.0-1033.39~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1034.33
linux-image-5.15.0-1034-aws (Ubuntu package) - addressed in versions 5.15.0-1034.38, 5.15.0-1034.38~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1034.38~20.04.23, 5.19.0.1025.22
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1036.32
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1036.32, 5.15.0.1036.43~20.04.26, 5.19.0.1026.21
linux-image-5.15.0-1036-azure (Ubuntu package) - addressed in versions 5.15.0-1036.43, 5.15.0-1036.43~20.04.1
linux-image-5.15.0-1036-azure-fde (Ubuntu package) - update to 5.15.0-1036.43.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1036.43.13
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1036.43~20.04.26
linux-5.15.94/kernel-generic - update to 5.15.94
linux-5.15.94/kernel-huge - update to 5.15.94
linux-5.15.94/kernel-modules - update to 5.15.94
linux-5.15.94/kernel-headers - update to 5.15.94_smp
linux-image-oem-22.04 (Ubuntu package) - update to 5.17.0.1034.32
linux-image-oem-22.04a (Ubuntu package) - update to 5.17.0.1034.32
linux-image-5.17.0-1034-oem (Ubuntu package) - update to 5.17.0-1034.35
linux-image-5.19.0-42-generic (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-5.19.0-42-generic-lpae (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-5.19.0-42-generic-64k (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-5.19.0-1018-raspi-nolpae (Ubuntu package) - update to 5.19.0-1018.25
linux-image-5.19.0-1018-raspi (Ubuntu package) - update to 5.19.0-1018.25
linux-image-5.19.0-1022-ibm (Ubuntu package) - update to 5.19.0-1022.24
linux-image-5.19.0-1023-kvm (Ubuntu package) - update to 5.19.0-1023.24
linux-image-5.19.0-1023-oracle (Ubuntu package) - update to 5.19.0-1023.26
linux-image-5.19.0-1024-lowlatency-64k (Ubuntu package) - update to 5.19.0-1024.25
linux-image-5.19.0-1024-lowlatency (Ubuntu package) - update to 5.19.0-1024.25
linux-image-5.19.0-1024-gcp (Ubuntu package) - update to 5.19.0-1024.26
linux-image-5.19.0-1025-aws (Ubuntu package) - update to 5.19.0-1025.26
linux-image-5.19.0-1026-azure (Ubuntu package) - update to 5.19.0-1026.29~22.04.1
linux-image-oem-22.04b (Ubuntu package) - update to 6.0.0.1019.19
linux-image-6.0.0-1019-oem (Ubuntu package) - update to 6.0.0-1019.19
linux-image-oem-22.04c (Ubuntu package) - update to 6.1.0.1008.8
linux-image-6.1.0-1008-oem (Ubuntu package) - update to 6.1.0-1008.8
kernel - update to 6.1.10-15.42

External References

Related Security Bulletins