Linux: Exposure of Resource to Wrong Sphere
CVE-2022-48757 is a high-severity exposure of resource to wrong sphere vulnerability in Linux, with a CVSS 3.1 base score of 7.1 out of 10. It can be exploited with local access to the system by an attacker with a low-privileged account, without any action from a user. The record lists versions 8f88c78d24f6f346919007cd459fd7e51a8c7779, be1ca30331c7923c6f376610c1bd6059be9b1908, c38023032a598ec6263e008d62c7f02def72d5c7 as the first without the flaw, so updating Linux to one of those releases or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 0.22% chance of exploitation within 30 days, which is low compared with other CVEs.
High severity with no evidence of exploitation so far.
What to do
- Update Linux to 8f88c78d24f6f346919007cd459fd7e51a8c7779 or be1ca30331c7923c6f376610c1bd6059be9b1908 or c38023032a598ec6263e008d62c7f02def72d5c7 or b67ad6170c0ea87391bb253f35d1f78857736e54, whichever matches your release line, or a later version.
- Update Linux Kernel to 4.4.302 or 4.9.300 or 4.14.265 or 4.19.228, whichever matches your release line, or a later version.
Affected products and versions
| Vendor | Product | Affected versions | Fixed in |
|---|---|---|---|
| Linux | Linux | 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50 up to, but not including, 8f88c78d24f6f346919007cd459fd7e51a8c7779; 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50 up to, but not including, be1ca30331c7923c6f376610c1bd6059be9b1908; 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50 up to, but not including, c38023032a598ec6263e008d62c7f02def72d5c7; 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50 up to, but not including, b67ad6170c0ea87391bb253f35d1f78857736e54; 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50 up to, but not including, e372ecd455b6ebc7720f52bf4b5f5d44d02f2092; 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50 up to, but not including, db044d97460ea792110eb8b971e82569ded536c6; 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50 up to, but not including, e43669c77cb3a742b7d84ecdc7c68c4167a7709b; 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50 up to, but not including, 839ec7039513a4f84bfbaff953a9393471176bee; and 2 more ranges | 8f88c78d24f6f346919007cd459fd7e51a8c7779, be1ca30331c7923c6f376610c1bd6059be9b1908, c38023032a598ec6263e008d62c7f02def72d5c7, b67ad6170c0ea87391bb253f35d1f78857736e54, e372ecd455b6ebc7720f52bf4b5f5d44d02f2092, db044d97460ea792110eb8b971e82569ded536c6 |
| Linux | Linux Kernel | 2.6.26 up to, but not including, 4.4.302; 4.5 up to, but not including, 4.9.300; 4.10 up to, but not including, 4.14.265; 4.15 up to, but not including, 4.19.228; 4.20 up to, but not including, 5.4.176; 5.5 up to, but not including, 5.10.96; 5.11 up to, but not including, 5.15.19; 5.16 up to, but not including, 5.16.5; and 1 more ranges | 4.4.302, 4.9.300, 4.14.265, 4.19.228, 5.4.176, 5.10.96 |
Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.
How the severity score breaks down
- Attack vector
- LocalThe attacker needs local access or must trick a user into running something.
- Attack complexity
- LowNo special conditions are needed; the attack works reliably.
- Privileges required
- LowA basic user account is enough.
- User interaction
- NoneNo action by a victim is required.
- Scope
- UnchangedImpact stays within the vulnerable component.
- Confidentiality
- HighAll data handled by the component can be read.
- Integrity
- NoneNothing can be modified.
- Availability
- HighThe component can be taken down completely.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H. Scored by NVD.
Official description
In the Linux kernel, the following vulnerability has been resolved: net: fix information leakage in /proc/net/ptype In one net namespace, after creating a packet socket without binding it to a device, users in other net namespaces can observe the new `packet_type` added by this packet socket by reading `/proc/net/ptype` file. This is minor information leakage as packet socket is namespace aware. Add a net pointer in `packet_type` to keep the net namespace of of corresponding packet socket. In `ptype_seq_show`, this net pointer must be checked when it is not NULL.
Source: the CVE record as published by its numbering authority, via NVD and CVE.org.
The underlying weakness: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
More Exposure of Resource to Wrong Sphere vulnerabilities (CWE-668)
Timeline
- CVE record published.
- CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: partial).
- Record last changed materially (score, affected products, status or references).
References
Patches and release notes
- git.kernel.org/stable/c/47934e06b65637c88a762d9c98329ae6e3238888
- git.kernel.org/stable/c/839ec7039513a4f84bfbaff953a9393471176bee
- git.kernel.org/stable/c/8f88c78d24f6f346919007cd459fd7e51a8c7779
- git.kernel.org/stable/c/b67ad6170c0ea87391bb253f35d1f78857736e54
- git.kernel.org/stable/c/be1ca30331c7923c6f376610c1bd6059be9b1908
- git.kernel.org/stable/c/c38023032a598ec6263e008d62c7f02def72d5c7
- git.kernel.org/stable/c/db044d97460ea792110eb8b971e82569ded536c6
- git.kernel.org/stable/c/e372ecd455b6ebc7720f52bf4b5f5d44d02f2092
- git.kernel.org/stable/c/e43669c77cb3a742b7d84ecdc7c68c4167a7709b
Recent Exposure of Resource to Wrong Sphere vulnerabilities
- 7.8 High severity
- 7.1 High severity
- 7.1 High severity
- 7.9 High severity
- 8.8 High severity
- 7.4 High severity
Spotted an error? Tell us.