CVE-2022-43945: Buffer Overflow

Reference Links

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8
• https://security.netapp.com/advisory/ntap-20221215-0006/
• http://packetstormsecurity.com/files/171289/Kernel-Live-Patch-Security-Notice-LNS-0092-1.html
• https://launchpad.net/bugs/cve/CVE-2022-43945
• https://www.cve.org/CVERecord?id=CVE-2022-43945 https://nvd.nist.gov/vuln/detail/CVE-2022-43945 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8
• https://bugzilla.redhat.com/show_bug.cgi?id=2141752
• https://access.redhat.com/errata/RHSA-2023:0854
• https://access.redhat.com/errata/RHSA-2023:0832
• https://access.redhat.com/errata/RHSA-2023:0839
• https://access.redhat.com/errata/RHSA-2023:0334
• https://access.redhat.com/errata/RHSA-2023:0300
• https://access.redhat.com/errata/RHSA-2023:0348
• https://access.redhat.com/errata/RHSA-2022:8973
• https://access.redhat.com/errata/RHSA-2022:8974
• https://access.redhat.com/errata/RHSA-2022:9082
• https://access.redhat.com/security/cve/cve-2022-43945
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2167765
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43945
• https://nvd.nist.gov/vuln/detail/CVE-2022-43945
• https://security-tracker.debian.org/tracker/CVE-2022-43945
• https://ubuntu.com/security/CVE-2022-43945

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2023:0854
• RHSA-2023:0832
• RHSA-2023:0839
• RHSA-2023:0334
• RHSA-2023:0300
• RHSA-2023:0348
• RHSA-2022:8973
• RHSA-2022:8974
• RHSA-2022:9082

Frequently Asked Questions

• What is the severity of CVE-2022-43945?

  CVE-2022-43945 has a severity rating that suggests it could lead to a denial of service due to a buffer overflow in the Linux kernel's nfsd subsystem.

• How do I fix CVE-2022-43945?

  To mitigate CVE-2022-43945, upgrade to patched kernel versions, specifically kernel-rt versions 0:4.18.0-425.13.1.rt7.223.el8_7, or other specified updates.

• Which Linux kernel versions are affected by CVE-2022-43945?

  CVE-2022-43945 affects various versions of the Linux kernel including those before versions 0:4.18.0-425.13.1.el8_7 and 0:5.14.0-162.12.1.el9_1.

• What are the potential impacts of CVE-2022-43945?

  The potential impact of CVE-2022-43945 is a denial of service, which could starve resources and disrupt system functionality for users.

• Is there a workaround for CVE-2022-43945?

  While the best course of action is to apply the relevant updates, temporarily limiting network access to the nfsd service can help reduce exposure until a fix is implemented.