CVE-2022-0487: Use After Free
A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality.
References:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=42933c8aa14be1caa9eda41f65cde8a3a95d3e39 https://lore.kernel.org/all/20220114075934.302464-1-gregkh@linuxfoundation.org/ https://bugzilla.suse.com/showbug.cgi?id=1194516
Other sources
A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.17 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.14 rc1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0487?
CVE-2022-0487 is classified as having a medium severity level due to its potential impact on system confidentiality.
How do I fix CVE-2022-0487?
To address CVE-2022-0487, users should upgrade to the latest kernel versions specified in the vulnerability advisory.
Which Linux kernel versions are affected by CVE-2022-0487?
CVE-2022-0487 affects multiple versions of the Linux kernel, specifically those prior to 5.17 and several versions within the 5.x and 6.x series.
Can a local attacker exploit CVE-2022-0487?
Yes, a local attacker with user privileges can exploit CVE-2022-0487 to potentially impact system confidentiality.
Is CVE-2022-0487 fixed in newer kernel updates?
Yes, CVE-2022-0487 has been addressed in subsequent kernel updates, which include necessary patches to mitigate the vulnerability.