CVE-2022-3028: Race Condition
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrmprobealgs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
Other sources
The function xfrmprobealgs updates the availability field of items in the authentication algorithms list (aalglist variable), but this update can occur simultaneously with another invocation of xfrmprobealgs, allowing an attacker to potentially trigger either an OOB write or leaking kernel heap memory by performing an OOB read and copying it into a socket.
Upstream references: https://lore.kernel.org/all/YtoWqEkKzvimzWS5@gondor.apana.org.au/T/ https://github.com/torvalds/linux/commit/ba953a9d89a00c078b85f4b190bc1dde66fe16b5
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-477.10.1.rt7.274.el8_8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-477.10.1.el8_8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-284.11.1.el9_2 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:5.14.0-284.11.1.rt14.296.el9_2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-3028?
CVE-2022-3028 has been classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2022-3028?
To fix CVE-2022-3028, upgrade to the appropriate kernel version as specified in the remediation details.
Which versions of the Linux kernel are affected by CVE-2022-3028?
CVE-2022-3028 affects various versions of the Linux kernel, including those before 4.18.0-477.10.1.el8_8 for Red Hat systems.
Can CVE-2022-3028 be exploited remotely?
No, CVE-2022-3028 can only be exploited by local attackers due to its nature.
What impact does CVE-2022-3028 have on system security?
CVE-2022-3028 could lead to out-of-bounds write or kernel heap memory leakage, potentially compromising system integrity.