CVE-2022-2991: Linux Kernel LightNVM Subsystem Heap-based Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code in the context of the kernel. The attacker must first obtain the ability to execute high-privileged code on the target system to exploit this vulnerability.
Other sources
A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code in the context of the kernel. The attacker must first obtain the ability to execute high-privileged code on the target system to exploit this vulnerability.
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
— ZDI
This vulnerability found within the LightNVM subsystem allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
References: https://www.zerodayinitiative.com/advisories/ZDI-22-960/ https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/drivers/lightnvm/Kconfig?h=v5.10.114&id=549209caabc89f2877ad5f62d11fca5c052e0e8
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2991?
The severity of CVE-2022-2991 is rated as high due to its potential to allow local attackers to escalate privileges.
How does CVE-2022-2991 affect the Linux kernel?
CVE-2022-2991 affects the Linux kernel's LightNVM subsystem, specifically due to a heap-based buffer overflow resulting from improper validation of user-supplied data.
How can I fix CVE-2022-2991?
To fix CVE-2022-2991, upgrade the Linux kernel to version 5.15 or later.
Which versions of the Linux kernel are vulnerable to CVE-2022-2991?
Versions of the Linux kernel prior to 5.15 are vulnerable to CVE-2022-2991.
What kind of attack can CVE-2022-2991 facilitate?
CVE-2022-2991 can facilitate local privilege escalation attacks, allowing attackers to gain unauthorized access to elevated privileges.