CVE-2022-1882: Use After Free
A UAF flaw in Linux Kernel found in pipes functionality. The problem located in function freepipeinfo of the fs/pipe.c. When a pipe node is freed, it doesn't make pipe->watchqueue->pipe null. When function postonenotification is called, it will use this field, but it has been freed and watchqueue->pipe is a dangling pointer. The problem was introduced since commit db8facfc9fafacefe8a835 "watchqueue, pipe: Free watchqueue state after clearing pipe ring".
Reference: https://git.kernel.org/linus/353f7988dd8413c4
Other sources
A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe postonenotification() after freepipeinfo() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-1882?
CVE-2022-1882 has been rated as a medium severity vulnerability.
How do I fix CVE-2022-1882?
To fix CVE-2022-1882, update your kernel to the patched versions 0:5.14.0-284.11.1.el9_2, 5.18, or higher.
Which systems are affected by CVE-2022-1882?
CVE-2022-1882 affects Linux Kernel versions between 5.10.106 and 5.10.134, as well as versions 5.15.29 to 5.15.58 and 5.16.15 to 5.18.15.
What is the nature of the vulnerability CVE-2022-1882?
CVE-2022-1882 is a use-after-free (UAF) vulnerability in the Linux kernel's pipes functionality.
Is there a workaround for CVE-2022-1882?
No specific workaround is recommended for CVE-2022-1882; applying the security updates is the best approach.