CVE-2022-20141: Use After Free

Published Jul 16, 2021
·
Updated

A flaw in the Linux Kernel found in the net/ipv4/igmp.c. When local user opening and closing inet sockets with IGMP protocol, the race condition could happen that leads to use after free due to improper locking in function ipcheckmcrcu.

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv4/igmp.c?h=v5.19&id=23d2b94043ca8835bd1e67749020e839f396a1c2

Other sources

A use-after-free flaw was found in the Linux kernel’s IGMP protocol in how a user triggers a race condition in the ipcheckmcrcu function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

In ipcheckmcrcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.

— OSV

Affected Software

110 affected componentsFixes available
redhat/kernel-rt<0:4.18.0-477.10.1.rt7.274.el8_8
0:4.18.0-477.10.1.rt7.274.el8_8
redhat/kernel<0:4.18.0-477.10.1.el8_8
0:4.18.0-477.10.1.el8_8
redhat/kernel<0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
redhat/kernel-rt<0:5.14.0-284.11.1.rt14.296.el9_2
0:5.14.0-284.11.1.rt14.296.el9_2
Google Android
Google Android
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
debian/linux<5.14.6-1
5.14.6-1
debian/linux<5.14.6-1
5.14.6-1
debian/linux<5.14.6-1
5.14.6-1
android/:linux_kernel:>=:0<:2022-06-05
:2022-06-05
ubuntu/linux-aws<4.4.0-1110.116
4.4.0-1110.116
ubuntu/linux-azure<4.15.0-1126.139~14.04.1
4.15.0-1126.139~14.04.1
ubuntu/linux-lts-xenial<4.4.0-230.264~14.04.1
4.4.0-230.264~14.04.1
ubuntu/linux*
ubuntu/linux<4.4.0-230.264
4.4.0-230.264
ubuntu/linux-aws<4.4.0-1146.161
4.4.0-1146.161
ubuntu/linux-aws-hwe<4.15.0-1115.122~16.04.1
4.15.0-1115.122~16.04.1
ubuntu/linux-azure<4.15.0-1126.139~16.04.1
4.15.0-1126.139~16.04.1
ubuntu/linux-gcp<4.15.0-1111.125~16.04.1
4.15.0-1111.125~16.04.1
ubuntu/linux-hwe<4.15.0-162.170~16.04.1
4.15.0-162.170~16.04.1
ubuntu/linux-kvm<4.4.0-1111.121
4.4.0-1111.121
ubuntu/linux-oracle<4.15.0-1083.91~16.04.1
4.15.0-1083.91~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1080.87
4.4.0-1080.87
ubuntu/linux-fips*
ubuntu/linux<4.15.0-162.170
4.15.0-162.170
ubuntu/linux-aws<4.15.0-1115.122
4.15.0-1115.122
ubuntu/linux-aws-5.4<5.4.0-1059.62~18.04.1
5.4.0-1059.62~18.04.1
ubuntu/linux-azure-4.15<4.15.0-1126.139
4.15.0-1126.139
ubuntu/linux-azure-5.4<5.4.0-1063.66~18.04.1
5.4.0-1063.66~18.04.1
ubuntu/linux-dell300x<4.15.0-1030.35
4.15.0-1030.35
ubuntu/linux-gcp-4.15<4.15.0-1111.125
4.15.0-1111.125
ubuntu/linux-gcp-5.4<5.4.0-1057.61~18.04.1
5.4.0-1057.61~18.04.1
ubuntu/linux-gke-5.4<5.4.0-1055.58~18.04.1
5.4.0-1055.58~18.04.1
ubuntu/linux-gkeop-5.4<5.4.0-1026.27~18.04.1
5.4.0-1026.27~18.04.1
ubuntu/linux-hwe-5.4<5.4.0-90.101~18.04.1
5.4.0-90.101~18.04.1
ubuntu/linux-kvm<4.15.0-1102.104
4.15.0-1102.104
ubuntu/linux-oracle<4.15.0-1083.91
4.15.0-1083.91
ubuntu/linux-oracle-5.4<5.4.0-1057.61~18.04.1
5.4.0-1057.61~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1046.50~18.04.1
5.4.0-1046.50~18.04.1
ubuntu/linux-raspi2<4.15.0-1098.104
4.15.0-1098.104
ubuntu/linux-snapdragon<4.15.0-1115.124
4.15.0-1115.124
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-azure*
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-5.3*
ubuntu/linux-gke-4.15*
ubuntu/linux-hwe*
ubuntu/linux-hwe-edge*
ubuntu/linux-oem*
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-aws-fips<4.15.0-2056.58
4.15.0-2056.58
ubuntu/linux-azure-fips<4.15.0-2038.42
4.15.0-2038.42
ubuntu/linux-fips<4.15.0-1072.81
4.15.0-1072.81
ubuntu/linux-gcp-fips<4.15.0-2021.23
4.15.0-2021.23
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-90.101
5.4.0-90.101
ubuntu/linux-aws<5.4.0-1059.62
5.4.0-1059.62
ubuntu/linux-azure<5.4.0-1063.66
5.4.0-1063.66
ubuntu/linux-bluefield<5.4.0-1021.24
5.4.0-1021.24
ubuntu/linux-gcp<5.4.0-1057.61
5.4.0-1057.61
ubuntu/linux-gke<5.4.0-1055.58
5.4.0-1055.58
ubuntu/linux-gkeop<5.4.0-1026.27
5.4.0-1026.27
ubuntu/linux-ibm<5.4.0-1007.8
5.4.0-1007.8
ubuntu/linux-kvm<5.4.0-1049.51
5.4.0-1049.51
ubuntu/linux-oracle<5.4.0-1057.61
5.4.0-1057.61
ubuntu/linux-raspi<5.4.0-1046.50
5.4.0-1046.50
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1069.73+fips2
5.4.0-1069.73+fips2
ubuntu/linux-azure-fips<5.4.0-1073.76+fips1
5.4.0-1073.76+fips1
ubuntu/linux-fips<5.4.0-1036.42
5.4.0-1036.42
ubuntu/linux-gcp-fips<5.4.0-1067.71~20.04.1
5.4.0-1067.71~20.04.1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux-intel-iot-realtime*
ubuntu/linux-realtime*
ubuntu/linux-raspi-realtime*
ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel-rt to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-477.10.1.rt7.274.el8_8
  2. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-477.10.1.el8_8
  3. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:5.14.0-284.11.1.el9_2
  4. Upgrade

    Upgrade redhat/kernel-rt to a version that resolves this vulnerability.

    Fixed in 0:5.14.0-284.11.1.rt14.296.el9_2
  5. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
  6. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 5.14.6-1
  7. Upgrade

    Upgrade android/:linux_kernel: to a version that resolves this vulnerability.

    Fixed in :2022-06-05
  8. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1110.116
  9. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1126.139~14.04.1
  10. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-230.264~14.04.1
  11. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-230.264
  12. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1146.161
  13. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1115.122~16.04.1
  14. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1126.139~16.04.1
  15. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1111.125~16.04.1
  16. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-162.170~16.04.1
  17. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1111.121
  18. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1083.91~16.04.1
  19. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1080.87
  20. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-162.170
  21. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1115.122
  22. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1059.62~18.04.1
  23. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1126.139
  24. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1063.66~18.04.1
  25. Upgrade

    Upgrade ubuntu/linux-dell300x to a version that resolves this vulnerability.

    Fixed in 4.15.0-1030.35
  26. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1111.125
  27. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1057.61~18.04.1
  28. Upgrade

    Upgrade ubuntu/linux-gke-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1055.58~18.04.1
  29. Upgrade

    Upgrade ubuntu/linux-gkeop-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1026.27~18.04.1
  30. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-90.101~18.04.1
  31. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1102.104
  32. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1083.91
  33. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1057.61~18.04.1
  34. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1046.50~18.04.1
  35. Upgrade

    Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1098.104
  36. Upgrade

    Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.

    Fixed in 4.15.0-1115.124
  37. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2056.58
  38. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2038.42
  39. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1072.81
  40. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2021.23
  41. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-90.101
  42. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1059.62
  43. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1063.66
  44. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1021.24
  45. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1057.61
  46. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.4.0-1055.58
  47. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1026.27
  48. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1007.8
  49. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1049.51
  50. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1057.61
  51. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1046.50
  52. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1069.73+fips2
  53. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1073.76+fips1
  54. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1036.42
  55. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1067.71~20.04.1
  56. Upgrade

    Upgrade Linux kernel to a version that resolves this vulnerability.

    Patch 23d2b94043ca8835bd1e67749020e839f396a1c2

Event History

Jul 16, 2021
CVE Published
12:00 AM
Jun 1, 2022
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Jun 6, 2022
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Jun 15, 2022
CVE Published
via MITRE·01:02 PM
Data Sourced
via MITRE·01:02 PM
DescriptionWeakness
Data Sourced
via OSV·02:15 PM
Severity
Event
via OSV·02:15 PM
Aug 3, 2022
Data Sourced
via Red Hat·02:40 PM
DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2022-20141?

CVE-2022-20141 has a high severity rating due to the potential for a local user to exploit a race condition leading to use after free.

2

How do I fix CVE-2022-20141?

To fix CVE-2022-20141, update the Linux kernel to the specified remedial versions including 0:4.18.0-477.10.1.rt7.274.el8_8 or the relevant packages for your system.

3

Which platforms are affected by CVE-2022-20141?

CVE-2022-20141 affects various versions of the Linux kernel across platforms including Red Hat and Google Android.

4

What causes CVE-2022-20141?

CVE-2022-20141 is caused by improper locking in the ip_check_mc_rcu function when handling IGMP protocol with inet sockets.

5

Who is responsible for addressing CVE-2022-20141?

The vendor of the affected software, such as Red Hat or Debian, is responsible for providing updates and patches to address CVE-2022-20141.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203