CVE-2022-0358: High severity qemu vulnerability
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.
Other sources
Virtiofs is still vulnerable to CVE-2018-13405 even with an upstream host and guest kernel which has fixed this CVE. A local user in the guest can still create files in the directories shared by virtiofs with unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. Here, the non-member can trigger the creation of a plain file whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-0358?
CVE-2022-0358 is a vulnerability in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation.
What is the severity of CVE-2022-0358?
CVE-2022-0358 has a severity score of 7.8 (high).
How does CVE-2022-0358 affect QEMU?
CVE-2022-0358 affects the QEMU software, specifically the virtio-fs shared file system daemon (virtiofsd) implementation.
What is the remedy for CVE-2022-0358?
The remedy for CVE-2022-0358 depends on the specific affected software version and source, please refer to the provided references for more information.
Where can I find more information about CVE-2022-0358?
You can find more information about CVE-2022-0358 in the provided references.