CVE-2022-0617: Null Pointer Dereference
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.
Other sources
A flaw was found in the Linux kernel. There is a null pointer dereference bug that would be triggered when writing something to an ICB inode.
Upstream fix:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fc3b7c2981bbd1047916ade327beccb90994eee https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea8569194b43f0f01f0a84c689388542c7254a1f
— Red Hat
A NULL pointer dereference was found in the Linux kernel’s UDF file system functionality in the way the user triggers the udffilewriteiter function for a malicious UDF image. This flaw allows a local user to crash the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-425.3.1.rt7.213.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-425.3.1.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-162.6.1.el9_1 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:5.14.0-162.6.1.rt21.168.el9_1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/Linux kernelto a version that resolves this vulnerability.Fixed in 5.17 - Configuration
Prevent the UDF module from loading by adding `install udf /bin/true` to `/etc/modprobe.d/disable-udf.conf`.
Linux kernel UDF module (udf) install = /bin/true
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-0617?
CVE-2022-0617 has been classified as a high severity vulnerability.
Who is affected by CVE-2022-0617?
CVE-2022-0617 affects local users of the Linux kernel versions from 4.2-rc1 to 5.17-rc2.
How do I fix CVE-2022-0617?
To remediate CVE-2022-0617, update to the latest kernel version specified by your distribution that is above the threshold versions.
What type of vulnerability is CVE-2022-0617?
CVE-2022-0617 is a local denial-of-service vulnerability due to a null pointer dereference in the UDF file system.
Can CVE-2022-0617 crash my system?
Yes, an exploit of CVE-2022-0617 can lead to a crash of the system.