Alerts This Week
Warning Icon 1 924
Alerts This Week
Warning Icon 1 924

Mageia 8: MGASA-2022-0122 Moderate: Kernel-Linus Local Privilege Escalation

mageia
Calendar Grey March 29, 2022
Dist Mageia Esm H88
The recent kernel update for Mageia 8 tackles several vulnerabilities, notably addressing memory corruption and elevating rights issues.
This kernel-linus update is based on upstream 5.15.32 and fixes at least the following security issues: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s ...

Summary

This kernel-linus update is based on upstream 5.15.32 and fixes at least the following security issues:
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system (CVE-2022-0995).
A flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers write(). A local user could use this flaw to get some unauthorized access to some data from the FUSE filesystem and as result potentially privilege escalation too (CVE-2022-1011).
A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue (CVE-2022-1015).
A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c: nft_do_chain, which can cause a use-after-free. This issue needs to han...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=30200

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.29

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.30

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.31

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.32

- https://www.cve.org/CVERecord?id=CVE-2022-0995

- https://www.cve.org/CVERecord?id=CVE-2022-1011

- https://www.cve.org/CVERecord?id=CVE-2022-1015

- https://www.cve.org/CVERecord?id=CVE-2022-1016

- https://www.cve.org/CVERecord?id=CVE-2022-1048

- https://www.cve.org/CVERecord?id=CVE-2022-26490

- https://www.cve.org/CVERecord?id=CVE-2022-27666

Resolution

SRPMS

- 8/core/kernel-linus-5.15.32-1.mga8

Publication date: 29 Mar 2022
URL: https://advisories.mageia.org/MGASA-2022-0122.html
Type: security
CVE: CVE-2022-0995, CVE-2022-1011, CVE-2022-1015, CVE-2022-1016, CVE-2022-1048, CVE-2022-26490, CVE-2022-27666

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here