CVE-2022-0847: Linux kernel bug allows writing to arbitrary files, bypassing file permissions, immutability, snapshots and read-only mounts
Summary
CVE-2022-0847: In multiple functions of iov_iter.c, there is a possible out of bounds write due to uninitialized data. Affects :linux_kernel: versions >= :0, < :2022-05-05. Fixed in :2022-05-05. How to fix ↓
Also tracked for
- linux · Debian:11
The same CVE-2022-0847 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a critical component of the Linux operating system, responsible for managing system resources and providing core functionality. It is widely used in various distributions, including Android. This vulnerability affects the Linux kernel in Android, specifically in the iov_iter.c file. The iov_iter.c file contains multiple functions that handle input/output vectors (iov) and iterators. These functions are used for reading and writing data to and from files. The vulnerability arises from uninitialized data, leading to an out-of-bounds write. This vulnerability can be exploited locally to escalate privileges in system libraries without requiring additional execution privileges. User interaction is not necessary for exploitation.
Vulnerability Detail
The vulnerability in the Linux kernel allows an attacker to write to arbitrary files, bypassing file permissions, immutability, snapshots, and read-only mounts. This can lead to unauthorized modification of sensitive files, potentially compromising the integrity and security of the system. The uninitialized data issue in the iov_iter.c file can be leveraged to perform an out-of-bounds write, which can be abused to overwrite critical data structures and execute arbitrary code with elevated privileges. This vulnerability poses a significant risk to the affected systems, as it can be exploited by local attackers to gain unauthorized access and control over the system.
How To Fix
Minimum fixed version
:2022-05-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The Linux kernel vulnerability (CVE-2022-0847) poses a significant risk to Android systems, allowing for unauthorized modification of files and privilege escalation. It is crucial to apply the available patches and keep the system up to date with security updates. Following best practices for system hardening can also help mitigate the risk. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for :linux_kernel: →
FAQ
This vulnerability allows an attacker to write to arbitrary files, bypassing file permissions, immutability, snapshots, and read-only mounts. It can lead to unauthorized modification of sensitive files and potential compromise of the system's integrity and security.
No, user interaction is not needed for exploitation of this vulnerability. It can be exploited locally by an attacker with access to the system.
This vulnerability is classified as high severity due to its potential impact on system integrity and security. It allows for privilege escalation and unauthorized modification of critical files.
The recommended mitigation is to apply the available patches for the Linux kernel in Android. Keeping the system up to date with security patches and following best practices for system hardening can also help mitigate the risk.
You can find more information about this vulnerability in the Android Open Source Project (AOSP) security bulletin ASB-A-220741611. The bulletin provides details about the vulnerability, affected versions, and available fixes.
References
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
