Vulnerability · Published Nov 4, 2022 · Assigned by SNPS
CVE-2022-43945
High 7.5
In plain English
A high-severity security flaw in linux_kernel from linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.4% (higher than 93% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)5.4%top 7.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | bpftool | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-core | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-core | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-debug | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-debug | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-devel | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-devel | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-doc | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-doc | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-modules | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-modules | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-rt | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-debug-kvm | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-kvm | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-kvm | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-425.13.1.rt7.223.el8_7 | ALSA-2023:0854 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-162.12.1.rt21.175.el9_1 | ALSA-2023:0300 |
| AlmaLinux:8 | kernel-tools | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-tools | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | perf | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | perf | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| AlmaLinux:8 | python3-perf | 4.18.0-425.13.1.el8_7 | ALSA-2023:0832 |
| AlmaLinux:9 | python3-perf | 5.14.0-162.12.1.el9_1 | ALSA-2023:0334 |
| Debian:12 | linux | 6.0.3-1 | DEBIAN-CVE-2022-43945 |
| Debian:13 | linux | 6.0.3-1 | DEBIAN-CVE-2022-43945 |
| Debian:14 | linux | 6.0.3-1 | DEBIAN-CVE-2022-43945 |
| Rocky Linux:8 | kernel | 0:4.18.0-425.13.1.el8_7.cloud | RXSA-2023:0832 |
| Rocky Linux:8 | kernel | 0:4.18.0-425.13.1.el8_7 | RLSA-2023:0832 |
| Rocky Linux:9 | kernel | 0:5.14.0-162.12.1.el9_1.cloud.0.1 | RXSA-2023:0334 |
| Rocky Linux:9 | kernel | 0:5.14.0-162.12.1.el9_1.0.2 | RLSA-2023:0334 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-425.13.1.rt7.223.el8_7 | RLSA-2023:0854 |
| Rocky Linux:9 | kernel-rt | 0:5.14.0-162.12.1.rt21.175.el9_1 | RLSA-2023:0300 |
| Ubuntu:22.04:LTS | linux | 5.15.0-56.62 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux | 5.15.0-56.62 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1026.30 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1026.30 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1029.36 | USN-5779-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1029.36 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1029.36.1 | USN-5779-1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1029.36.1 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1025.32 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1025.32 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1023.28 | USN-5755-2 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1023.28 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1011.15 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1011.15 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1021.24 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1021.24 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1021.26 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1021.26 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1024.29 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1024.29 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-56.62 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-56.62 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1015.15 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | 5.17.0-1024.25 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | 5.17.0-1024.25 | USN-5773-1 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | 6.0.0-1012.12 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | 6.0.0-1012.12 | USN-5914-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1025.31 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1025.31 | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1021.23 | USN-5755-1 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1021.23 | UBUNTU-CVE-2022-43945 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2022-43945 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2022-43945 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| linux | linux_kernel | < 6.0.2 |
Weakness: CWE-131 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8
- https://security.netapp.com/advisory/ntap-20221215-0006/
- http://packetstormsecurity.com/files/171289/Kernel-Live-Patch-Security-Notice-LNS-0092-1.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html