CVE-2022-1882: Use After Free
A UAF flaw in Linux Kernel found in pipes functionality. The problem located in function freepipeinfo of the fs/pipe.c. When a pipe node is freed, it doesn't make pipe->watchqueue->pipe null. When function postonenotification is called, it will use this field, but it has been freed and watchqueue->pipe is a dangling pointer. The problem was introduced since commit db8facfc9fafacefe8a835 "watchqueue, pipe: Free watchqueue state after clearing pipe ring".
Reference: https://git.kernel.org/linus/353f7988dd8413c4
Other sources
A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe postonenotification() after freepipeinfo() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-284.11.1.el9_2 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:5.14.0-284.11.1.rt14.296.el9_2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/Linux kernelto a version that resolves this vulnerability.Fixed in 5.18
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-1882?
CVE-2022-1882 has been rated as a medium severity vulnerability.
How do I fix CVE-2022-1882?
To fix CVE-2022-1882, update your kernel to the patched versions 0:5.14.0-284.11.1.el9_2, 5.18, or higher.
Which systems are affected by CVE-2022-1882?
CVE-2022-1882 affects Linux Kernel versions between 5.10.106 and 5.10.134, as well as versions 5.15.29 to 5.15.58 and 5.16.15 to 5.18.15.
What is the nature of the vulnerability CVE-2022-1882?
CVE-2022-1882 is a use-after-free (UAF) vulnerability in the Linux kernel's pipes functionality.
Is there a workaround for CVE-2022-1882?
No specific workaround is recommended for CVE-2022-1882; applying the security updates is the best approach.