Use-after-free in Linux kernel - CVE-2022-45886

Vulnerability identifier: #VU75336

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-45886

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

Affected software:
Linux kernel
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Availability Extension 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Availability Extension 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Real Time 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server 12 SP4 LTSS
SUSE Linux Enterprise Server 12 SP4 ESPOS
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise Workstation Extension 12
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 Business Critical Linux
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 Business Critical Linux
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Real Time Module
SUSE Linux Enterprise Server 15 SP3 Business Critical Linux
SUSE Linux Enterprise Server 15 SP3 LTSS
Public Cloud Module
Legacy Module
Development Tools Module
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
Dell Data Protection Central
Dell EMC PowerProtect Data Protection
ObjectScale
EMC Cloud Tiering Appliance
kgraft-patch-4_12_14-95_128-default
kgraft-patch-4_12_14-122_162-default
kernel-livepatch-4_12_14-150100_197_148-default
kernel-livepatch-5_3_18-150200_24_154-default
kernel-livepatch-5_3_18-150200_24_154-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_37-debugsource
kernel-livepatch-5_3_18-150300_59_124-default
kernel-livepatch-5_14_21-150400_15_37-rt
kernel-livepatch-SLE15-SP4-RT_Update_8-debugsource
kernel-livepatch-5_14_21-150400_15_37-rt-debuginfo
kernel-livepatch-5_14_21-150400_24_66-default-debuginfo
kernel-livepatch-SLE15-SP4_Update_13-debugsource
kernel-livepatch-5_14_21-150400_24_66-default
kernel-livepatch-5_14_21-150500_13_5-rt
kernel-livepatch-5_14_21-150500_13_5-rt-debuginfo
kernel-livepatch-SLE15-SP5-RT_Update_1-debugsource
kernel-livepatch-5_14_21-150500_55_7-default
kernel-livepatch-SLE15-SP5_Update_1-debugsource
kernel-livepatch-5_14_21-150500_55_7-default-debuginfo
kernel-default-debuginfo
kernel-default
kernel-syms
kernel-source
kernel-macros
kernel-devel
kernel-default-debugsource
kernel-default-base
kernel-default-devel
kernel-default-base-debuginfo
dlm-kmp-rt
kernel-rt-base
cluster-md-kmp-rt
kernel-syms-rt
ocfs2-kmp-rt
ocfs2-kmp-rt-debuginfo
kernel-rt-devel
kernel-rt_debug-devel-debuginfo
kernel-rt_debug-debugsource
kernel-rt_debug-debuginfo
kernel-rt-devel-debuginfo
kernel-rt-base-debuginfo
kernel-rt
kernel-devel-rt
kernel-source-rt
gfs2-kmp-rt
dlm-kmp-rt-debuginfo
kernel-rt-debuginfo
kernel-rt_debug-devel
gfs2-kmp-rt-debuginfo
cluster-md-kmp-rt-debuginfo
kernel-rt_debug
kernel-rt-debugsource
kernel-azure
kernel-azure-base-debuginfo
kernel-azure-debugsource
kernel-azure-base
kernel-syms-azure
kernel-azure-devel
kernel-azure-debuginfo
kernel-devel-azure
kernel-source-azure
dlm-kmp-default
cluster-md-kmp-default-debuginfo
dlm-kmp-default-debuginfo
ocfs2-kmp-default-debuginfo
gfs2-kmp-default
ocfs2-kmp-default
kernel-default-devel-debuginfo
kernel-default-man
kernel-default-kgraft-devel
kernel-default-kgraft
gfs2-kmp-default-debuginfo
cluster-md-kmp-default
kernel-default-extra
kernel-default-extra-debuginfo
kernel-obs-build
kernel-obs-build-debugsource
kernel-docs
kernel-vanilla-debugsource
reiserfs-kmp-default-debuginfo
reiserfs-kmp-default
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
kernel-zfcpdump
kernel-vanilla-devel-debuginfo
kernel-vanilla-livepatch-devel
kernel-vanilla-base-debuginfo
kernel-vanilla-devel
kernel-debug-base-debuginfo
kernel-debug-base
kernel-debug
kernel-kvmsmall
kernel-vanilla-debuginfo
kernel-vanilla-base
kernel-kvmsmall-base
kernel-kvmsmall-base-debuginfo
kernel-vanilla
kernel-zfcpdump-man
kernel-default-livepatch-devel
kernel-default-livepatch
kernel (Red Hat package)
kernel-doc
kernel-tools-libs-devel
kernel-abi-stablelists
python3-perf
perf
kernel-tools-libs
kernel-tools
kernel-modules-extra
kernel-modules
kernel-headers
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-cross-headers
kernel-core
kernel
bpftool
kernel-rt (Red Hat package)
kernel-tools-debuginfo
python3-perf-debuginfo
kernel-tools-devel
python2-perf
python2-perf-debuginfo
kernel-debuginfo
bpftool-debuginfo
kernel-debugsource
perf-debuginfo
kernel-preempt
kernel-preempt-debugsource
kernel-preempt-devel-debuginfo
kernel-preempt-debuginfo
kernel-preempt-devel
kernel-64kb-devel
kernel-64kb-debuginfo
kernel-64kb
dtb-al
dtb-zte
dtb-aarch64
kernel-64kb-debugsource
kernel-64kb-devel-debuginfo
kernel-azure-extra-debuginfo
ocfs2-kmp-azure-debuginfo
dlm-kmp-azure-debuginfo
cluster-md-kmp-azure
ocfs2-kmp-azure
reiserfs-kmp-azure-debuginfo
kernel-azure-optional
reiserfs-kmp-azure
kernel-azure-optional-debuginfo
kernel-azure-devel-debuginfo
kselftests-kmp-azure-debuginfo
cluster-md-kmp-azure-debuginfo
kselftests-kmp-azure
gfs2-kmp-azure
gfs2-kmp-azure-debuginfo
kernel-azure-extra
kernel-azure-livepatch-devel
dlm-kmp-azure
kernel-64kb-optional
dtb-qcom
kselftests-kmp-64kb
gfs2-kmp-64kb-debuginfo
dtb-renesas
cluster-md-kmp-64kb-debuginfo
kernel-64kb-optional-debuginfo
dtb-exynos
dtb-amd
dtb-arm
dlm-kmp-64kb
ocfs2-kmp-64kb
dlm-kmp-64kb-debuginfo
ocfs2-kmp-64kb-debuginfo
gfs2-kmp-64kb
dtb-hisilicon
dtb-nvidia
dtb-cavium
dtb-lg
dtb-rockchip
cluster-md-kmp-64kb
dtb-freescale
dtb-xilinx
dtb-amlogic
dtb-apm
dtb-allwinner
dtb-mediatek
kernel-64kb-livepatch-devel
dtb-marvell
dtb-sprd
reiserfs-kmp-64kb
dtb-apple
kernel-64kb-extra
dtb-altera
reiserfs-kmp-64kb-debuginfo
dtb-amazon
kernel-64kb-extra-debuginfo
kselftests-kmp-64kb-debuginfo
dtb-socionext
kernel-debug-debugsource
kernel-default-optional
kernel-debug-devel-debuginfo
kernel-debug-debuginfo
kernel-debug-livepatch-devel
kernel-obs-qa
kernel-kvmsmall-devel-debuginfo
kernel-kvmsmall-debugsource
kernel-kvmsmall-devel
kernel-kvmsmall-livepatch-devel
kernel-kvmsmall-debuginfo
kernel-source-vanilla
kselftests-kmp-default-debuginfo
kernel-default-optional-debuginfo
dtb-broadcom
kselftests-kmp-default
kernel-default-base-rebuild
kernel-docs-html
kernel-rt-extra
kernel-rt-optional-debuginfo
reiserfs-kmp-rt
kernel-rt-optional
kernel-rt-livepatch
kernel-rt-vdso
kernel-rt-livepatch-devel
kernel-rt_debug-vdso-debuginfo
kernel-rt_debug-livepatch-devel
reiserfs-kmp-rt-debuginfo
kernel-rt-vdso-debuginfo
kernel-rt-extra-debuginfo
kernel-rt_debug-vdso
kselftests-kmp-rt
kselftests-kmp-rt-debuginfo
kernel-azure-vdso
kernel-azure-vdso-debuginfo
kernel-default-vdso
kernel-default-vdso-debuginfo
kernel-debug-vdso-debuginfo
kernel-kvmsmall-vdso-debuginfo
kernel-kvmsmall-vdso
kernel-debug-vdso
linux-5.15.139/kernel-generic
linux-5.15.139/kernel-modules
linux-5.15.139/kernel-huge
linux-5.15.139/kernel-headers
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-6.2.0-34-generic (Ubuntu package)
linux-image-6.2.0-34-generic-64k (Ubuntu package)
linux-image-6.2.0-34-generic-lpae (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1006-starfive (Ubuntu package)
linux-image-starfive (Ubuntu package)
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package)
linux-image-6.2.0-1011-nvidia (Ubuntu package)
linux-image-nvidia-64k-6.2 (Ubuntu package)
linux-image-nvidia-hwe-22.04 (Ubuntu package)
linux-image-nvidia-6.2 (Ubuntu package)
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1013-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-6.2.0-1013-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-6.2.0-1014-kvm (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-6.2.0-1014-lowlatency-64k (Ubuntu package)
linux-image-6.2.0-1014-lowlatency (Ubuntu package)
linux-image-6.2.0-1014-azure (Ubuntu package)
linux-image-6.2.0-1014-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1014-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-6.2.0-1016-gcp (Ubuntu package)
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
Session Smart Router
Dell EMC VxRail Appliance

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in drivers/media/dvb-core/dvb_net.c in Linux kernel. A local user can trigger a race condition and execute arbitrary code with elevated privileges.

Install updates from vendor's website.

• https://lore.kernel.org/linux-media/20221115131822.6640-3-imv4bel@gmail.com/
• https://lore.kernel.org/linux-media/20221115131822.6640-1-imv4bel@gmail.com/
• https://security.netapp.com/advisory/ntap-20230113-0006/