Actively exploited · Published Feb 11, 2022 · Assigned by redhat
CVE-2022-0185
High 8.4 Exploited
In plain English
A high-severity integer overflow in kernel. Attackers are actively exploiting it in the wild (listed by CISA on August 21, 2024). The chance it is exploited in the next 30 days is estimated at 25.2% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
CISA guidance
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Federal agencies must remediate by Sep 11, 2024.
Official description
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-348.12.2.el8_5 | ALSA-2022:0188 |
| Debian:12 | linux | 5.15.15-1 | DEBIAN-CVE-2022-0185 |
| Debian:13 | linux | 5.15.15-1 | DEBIAN-CVE-2022-0185 |
| Debian:14 | linux | 5.15.15-1 | DEBIAN-CVE-2022-0185 |
| Rocky Linux:8 | kernel | 0:4.18.0-348.12.2.el8_5 | RLSA-2022:0188 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-348.12.2.rt7.143.el8_5 | RLSA-2022:0176 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2022-0185 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2022-0185 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2022-0185 |
Affected products (as reported)
Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=722d94847de2 x_refsource_MISC
- https://github.com/Crusaders-of-Rust/CVE-2022-0185 x_refsource_MISC
- https://www.openwall.com/lists/oss-security/2022/01/18/7 x_refsource_MISC
- https://www.willsroot.io/2022/01/cve-2022-0185.html x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20220225-0003/ x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0185 government-resource