CVE-2022-1943: High severity linux kernel vulnerability
A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udfwritefi(). A local user could use this flaw to crash the system or potentially
Other sources
udfwritefi() uses lengthOfImpUse of the entry it is writing to. However this field has not yet been initialized so it either contains completely bogus value or value from last directory entry at that place. In either case this is wrong and can lead to filesystem corruption or kernel crashes.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1943?
CVE-2022-1943 is considered a high severity vulnerability due to its potential to allow a local user to crash the system.
How do I fix CVE-2022-1943?
To fix CVE-2022-1943, update your Linux kernel to version 5.18 or apply the respective patches for earlier versions listed by your distribution.
What systems are affected by CVE-2022-1943?
CVE-2022-1943 affects multiple versions of the Linux kernel, particularly those before version 5.18 along with specific 5.15 and 5.16 series versions.
Can CVE-2022-1943 be exploited remotely?
CVE-2022-1943 is not a remote exploit; it requires local user access to trigger the vulnerability.
What components of the Linux kernel are vulnerable in CVE-2022-1943?
CVE-2022-1943 specifically affects the UDF file system functionality within the Linux kernel.