CVE-2022-4378: Buffer Overflow
A flaw stack overflow in the Linux Kernel found. If user have access to SYSCTL (dynamically changing certain kernel parameters and variables), then can provide incorrect input to the function doprocdointvec leading to system crash or potentially privileges escalation. Known example of such incorrect input by local user for the /proc/sys/net/ipv4/tcprmem , but it could be other situations when this function being used.
References: https://seclists.org/oss-sec/2022/q4/178 https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-6.0/proc-procskipspaces-shouldn-t-think-it-is-working-on-c-strings.patch https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-6.0/proc-avoid-integer-type-confusion-in-getproclong.patch
Other sources
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
— Launchpad
Linux Kernel is vulnerable to a denial of service, caused by a stack-based buffer overflow in the doprocdointvec function. By executing a specially-crafted program, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4378?
CVE-2022-4378 is a high-severity stack overflow vulnerability in the Linux Kernel that can lead to system crashes and privilege escalation.
How do I fix CVE-2022-4378?
To mitigate CVE-2022-4378, update to a patched version of the Linux Kernel, such as 6.0.12 or corresponding fixed versions in affected distributions.
What versions are affected by CVE-2022-4378?
CVE-2022-4378 affects multiple versions of the Linux Kernel from 4.9.0 to 6.0.11.
Can CVE-2022-4378 be exploited remotely?
Exploitation of CVE-2022-4378 requires local access to the system, as it involves interacting with SYSCTL.
What are the potential impacts of CVE-2022-4378?
The potential impacts of CVE-2022-4378 include system crashes and the possibility of privilege escalation for users with access to SYSCTL.