Out-of-bounds write in Linux kernel - CVE-2022-48423

Vulnerability identifier: #VU74154

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-48423

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within fs/ntfs3/record.c in Linux kernel. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Linux kernel
Ubuntu
openEuler
kernel
bpftool
kernel-tools-devel
kernel-devel
perf-debuginfo
kernel-headers
perf
python3-perf
kernel-debuginfo
python3-perf-debuginfo
kernel-tools
kernel-source
bpftool-debuginfo
kernel-tools-debuginfo
kernel-debugsource
linux-image-virtual (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-69-generic-lpae (Ubuntu package)
linux-image-5.15.0-69-generic-64k (Ubuntu package)
linux-image-5.15.0-69-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-69-generic (Ubuntu package)
linux-image-5.15.0-69-lowlatency (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.15.0-1017-gkeop (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1026-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1026-raspi (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1027-ibm (Ubuntu package)
linux-image-5.15.0-1027-intel-iotg (Ubuntu package)
linux-image-5.15.0-1029-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1030-kvm (Ubuntu package)
linux-image-5.15.0-1030-gke (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1031-gcp (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1032-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1033-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.15.0-1035-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-5.15.0-1035-azure (Ubuntu package)
linux-image-5.19.0-42-generic-64k (Ubuntu package)
linux-image-5.19.0-42-generic-lpae (Ubuntu package)
linux-image-5.19.0-42-generic (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-5.19.0-1018-raspi (Ubuntu package)
linux-image-5.19.0-1018-raspi-nolpae (Ubuntu package)
linux-image-5.19.0-1022-ibm (Ubuntu package)
linux-image-5.19.0-1023-kvm (Ubuntu package)
linux-image-5.19.0-1023-oracle (Ubuntu package)
linux-image-5.19.0-1024-lowlatency (Ubuntu package)
linux-image-5.19.0-1024-lowlatency-64k (Ubuntu package)
linux-image-5.19.0-1024-gcp (Ubuntu package)
linux-image-5.19.0-1025-aws (Ubuntu package)
linux-image-5.19.0-1026-azure (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 6.1.3
kernel - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
bpftool - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
kernel-tools-devel - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
kernel-devel - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
perf-debuginfo - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
kernel-headers - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
perf - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
python3-perf - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
kernel-debuginfo - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
python3-perf-debuginfo - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
kernel-tools - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
kernel-source - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
bpftool-debuginfo - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
kernel-tools-debuginfo - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
kernel-debugsource - addressed in versions 5.10.0-60.87.0.111, 5.10.0-136.27.0.103
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.42.38
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.42.38
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.42.38
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.69.67, 5.19.0.42.38
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.69.74, 5.19.0.1024.20
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.69.74, 5.19.0.1024.20
linux-image-5.15.0-69-generic-lpae (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic-64k (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-lowlatency-64k (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-generic (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-5.15.0-69-lowlatency (Ubuntu package) - update to 5.15.0-69.76~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.27
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.27
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.69.76~20.04.30
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1017.16
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1017.16
linux-image-5.15.0-1017-gkeop (Ubuntu package) - update to 5.15.0-1017.22
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1026.23, 5.19.0.1018.17
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1026.23, 5.19.0.1018.17
linux-image-5.15.0-1026-raspi-nolpae (Ubuntu package) - update to 5.15.0-1026.28
linux-image-5.15.0-1026-raspi (Ubuntu package) - update to 5.15.0-1026.28
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1027.23, 5.19.0.1022.19
linux-image-intel-iotg (Ubuntu package) - update to 5.15.0.1027.26
linux-image-5.15.0-1027-ibm (Ubuntu package) - update to 5.15.0-1027.30
linux-image-5.15.0-1027-intel-iotg (Ubuntu package) - update to 5.15.0-1027.32
linux-image-5.15.0-1029-gke (Ubuntu package) - update to 5.15.0-1029.34~20.04.1
linux-image-gke-5.15 (Ubuntu package) - addressed in versions 5.15.0.1029.34~20.04.1, 5.15.0.1030.29
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1030.26, 5.19.0.1023.20
linux-image-gke (Ubuntu package) - update to 5.15.0.1030.29
linux-image-5.15.0-1030-kvm (Ubuntu package) - update to 5.15.0-1030.35
linux-image-5.15.0-1030-gke (Ubuntu package) - update to 5.15.0-1030.35
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1031.26, 5.15.0.1031.38~20.04.1, 5.19.0.1024.20
linux-image-5.15.0-1031-gcp (Ubuntu package) - update to 5.15.0-1031.38~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1032.27, 5.15.0.1032.38~20.04.1, 5.19.0.1023.19
linux-image-5.15.0-1032-oracle (Ubuntu package) - update to 5.15.0-1032.38~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1033.32
linux-image-5.15.0-1033-aws (Ubuntu package) - update to 5.15.0-1033.37~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1033.37~20.04.22, 5.19.0.1025.22
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1035.31
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1035.31, 5.15.0.1035.42~20.04.25, 5.19.0.1026.21
linux-image-5.15.0-1035-azure-fde (Ubuntu package) - update to 5.15.0-1035.42.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1035.42.12
linux-image-5.15.0-1035-azure (Ubuntu package) - update to 5.15.0-1035.42~20.04.1
linux-image-5.19.0-42-generic-64k (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-5.19.0-42-generic-lpae (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-5.19.0-42-generic (Ubuntu package) - addressed in versions 5.19.0-42.43, 5.19.0-42.43~22.04.1
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 5.19.0.42.43~22.04.15
linux-image-5.19.0-1018-raspi (Ubuntu package) - update to 5.19.0-1018.25
linux-image-5.19.0-1018-raspi-nolpae (Ubuntu package) - update to 5.19.0-1018.25
linux-image-5.19.0-1022-ibm (Ubuntu package) - update to 5.19.0-1022.24
linux-image-5.19.0-1023-kvm (Ubuntu package) - update to 5.19.0-1023.24
linux-image-5.19.0-1023-oracle (Ubuntu package) - update to 5.19.0-1023.26
linux-image-5.19.0-1024-lowlatency (Ubuntu package) - update to 5.19.0-1024.25
linux-image-5.19.0-1024-lowlatency-64k (Ubuntu package) - update to 5.19.0-1024.25
linux-image-5.19.0-1024-gcp (Ubuntu package) - update to 5.19.0-1024.26
linux-image-5.19.0-1025-aws (Ubuntu package) - update to 5.19.0-1025.26
linux-image-5.19.0-1026-azure (Ubuntu package) - update to 5.19.0-1026.29~22.04.1

• https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.3
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54e45702b648b7c0000e90b3e9b890e367e16ea8

• Multiple vulnerabilities in Linux kernel ntfs3
• Ubuntu update for linux
• Ubuntu update for linux-gke
• Ubuntu update for linux-intel-iotg
• Ubuntu update for linux
• Ubuntu update for linux-ibm
• Ubuntu update for linux-gcp
• openEuler 22.03 LTS update for kernel
• openEuler 22.03 LTS SP1 update for kernel