CVE-2022-2078: Buffer Overflow
First published: Tue May 31 2022(Updated: )
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-rt | <0:4.18.0-425.3.1.rt7.213.el8 | 0:4.18.0-425.3.1.rt7.213.el8 |
| redhat/kernel | <0:4.18.0-425.3.1.el8 | 0:4.18.0-425.3.1.el8 |
| redhat/kernel | <0:5.14.0-70.26.1.el9_0 | 0:5.14.0-70.26.1.el9_0 |
| redhat/kernel-rt | <0:5.14.0-70.26.1.rt21.98.el9_0 | 0:5.14.0-70.26.1.rt21.98.el9_0 |
| redhat/kernel | <5.19 | 5.19 |
| Linux kernel | <5.19 | |
| Red Hat Enterprise Virtualization | =4.0 | |
| Red Hat Enterprise Linux | =8.0 | |
| Red Hat Enterprise Linux | =9.0 | |
| Debian | =11.0 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.17-1 |
Remedy
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Remedy
If not needed, disable the ability for unprivileged users to create namespaces: $ sudo sysctl -w kernel.unprivileged_userns_clone=0 $ echo kernel.unprivileged_userns_clone=0 | \ sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2022-2078 https://nvd.nist.gov/vuln/detail/CVE-2022-2078 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85
- https://bugzilla.redhat.com/show_bug.cgi?id=2096178
- https://access.redhat.com/errata/RHSA-2022:7444
- https://access.redhat.com/errata/RHSA-2022:7683
- https://access.redhat.com/errata/RHSA-2022:6610
- https://access.redhat.com/errata/RHSA-2022:6582
- https://access.redhat.com/security/cve/cve-2022-2078
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85
- https://www.debian.org/security/2022/dsa-5161
- https://launchpad.net/bugs/cve/CVE-2022-2078
- https://git.kernel.org/linus/fecf31ee395b0295f2d7260aa29946b7605f7c85
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2096178#c9
- https://access.redhat.com/security/cve/CVE-2022-2078
- https://access.redhat.com/security/cve/CVE-2022-1972
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2092537
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2096178#c10
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/
- https://www.openwall.com/lists/oss-security/2022/06/02/1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2078
- https://access.redhat.com/errata/RHSA-2024:0724
- https://security-tracker.debian.org/tracker/CVE-2022-2078
- https://nvd.nist.gov/vuln/detail/CVE-2022-2078
- https://ubuntu.com/security/CVE-2022-2078
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is the severity of CVE-2022-2078?
CVE-2022-2078 is classified as a high severity vulnerability due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2022-2078?
To fix CVE-2022-2078, upgrade to the patched versions of the Linux kernel provided by Red Hat or Debian as specified in the vulnerability details.
Which Linux kernel versions are affected by CVE-2022-2078?
CVE-2022-2078 affects kernel versions up to 5.19 and specific versions of the Red Hat kernel and Debian Linux.
Can CVE-2022-2078 be exploited remotely?
Yes, CVE-2022-2078 can be exploited remotely through malformed packets processed by the kernel's network filtering capabilities.
What are the potential impacts of CVE-2022-2078 on my system?
The potential impacts of CVE-2022-2078 include system crashes, denial of service, and unauthorized code execution, compromising system integrity.
- collector/redhat-cve
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/type
- agent/weakness
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2022-2078
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/remedy
- agent/last-modified-date
- agent/trending
- agent/source
- agent/event
- agent/author
- agent/tags
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/description
- package-manager/redhat
- package-manager/debian
- vendor/linux
- canonical/linux kernel
- vendor/redhat
- canonical/red hat enterprise virtualization
- version/red hat enterprise virtualization/4.0
- canonical/red hat enterprise linux
- version/red hat enterprise linux/8.0
- version/red hat enterprise linux/9.0
- vendor/debian
- canonical/debian
- version/debian/11.0