CVE-2022-24448: Low severity Linux Linux kernel vulnerability
A flaw was found in the Linux kernel. When an application tries to open a directory (using the ODIRECTORY flag) in a mounted NFS filesystem, a lookup operation is performed. If the NFS server returns a file as a result of the lookup, the NFS filesystem returns an uninitialized file descriptor instead of the expected ENOTDIR value. This flaw leads to the kernel's data leak into the userspace.
Other sources
An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomicopen() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.
If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomicopen() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.
References:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac795161c93699d600db16c1a8cc23a65a1eceaf https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.5
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-24448?
CVE-2022-24448 has a moderate severity level due to potential uninitialized file descriptor exposure.
How do I fix CVE-2022-24448?
To fix CVE-2022-24448, update your Linux kernel to versions 0:4.18.0-425.3.1.rt7.213.el8, 0:4.18.0-425.3.1.el8, 0:5.14.0-162.6.1.el9_1, or 5.16.5.
Which Linux distributions are affected by CVE-2022-24448?
CVE-2022-24448 affects various distributions including Red Hat Enterprise Linux and Debian.
What are the potential impacts of CVE-2022-24448?
The potential impacts of CVE-2022-24448 include data leaks and possible unauthorized access due to the use of an uninitialized file descriptor.
Is CVE-2022-24448 related to NFS filesystems?
Yes, CVE-2022-24448 is specifically related to vulnerabilities in the handling of NFS filesystems when opening directories.