Vulnerability · Published Feb 4, 2022 · Assigned by mitre
CVE-2022-24448
Low 3.3
In plain English
A low-severity security flaw in the bpftool package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)3.3Low
Exploit odds (30 days)0.4%top 65.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | bpftool | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-core | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-debug | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-devel | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-doc | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-doc | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-headers | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-headers | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-modules | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-rt | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-debug-kvm | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-kvm | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-kvm | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-425.3.1.rt7.213.el8 | ALSA-2022:7444 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-162.6.1.rt21.168.el9_1 | ALSA-2022:7933 |
| AlmaLinux:8 | kernel-tools | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-tools | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | perf | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | perf | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| AlmaLinux:8 | python3-perf | 4.18.0-425.3.1.el8 | ALSA-2022:7683 |
| AlmaLinux:9 | python3-perf | 5.14.0-162.6.1.el9_1 | ALSA-2022:8267 |
| Debian:12 | linux | 5.16.7-1 | DEBIAN-CVE-2022-24448 |
| Debian:13 | linux | 5.16.7-1 | DEBIAN-CVE-2022-24448 |
| Debian:14 | linux | 5.16.7-1 | DEBIAN-CVE-2022-24448 |
| Rocky Linux:8 | kernel | 0:4.18.0-425.3.1.el8 | RLSA-2022:7683 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-425.3.1.rt7.213.el8 | RLSA-2022:7444 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2022-24448 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2022-24448 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2022-24448 |
Affected products (as reported)
References
- https://www.spinics.net/lists/stable/msg531976.html x_refsource_MISC
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.5 x_refsource_MISC
- https://github.com/torvalds/linux/commit/ac795161c93699d600db16c1a8cc23a65a1eceaf x_refsource_MISC
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac795161c93699d600db16c1a8cc23a65a1eceaf x_refsource_MISC
- DSA-5092 vendor-advisory, x_refsource_DEBIAN
- [debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update mailing-list, x_refsource_MLIST
- [debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update mailing-list, x_refsource_MLIST
- DSA-5096 vendor-advisory, x_refsource_DEBIAN
- https://lore.kernel.org/all/67d6a536-9027-1928-99b6-af512a36cd1a%40huawei.com/T/ x_refsource_MISC
- https://github.com/torvalds/linux/commit/ab0fc21bc7105b54bafd85bd8b82742f9e68898a x_refsource_MISC