Local Privilege Escalation Vulnerability in multipath-tools: CVE-2022-41973
Summary
CVE-2022-41973: multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Affects multipath-tools across 2 version ranges.
< 0.8.5-2+deb11u1
< 66664cdb52f548b821b2ea28e49613c068e9375d
Fixed in 0.8.5-2+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
multipath-tools is a software package used in Linux environments to manage multiple paths to storage devices, enhancing redundancy and performance. It is essential for systems that require high availability and reliability in data storage. The package is widely utilized in enterprise environments, making its security critical. This vulnerability allows local users to exploit symlink handling issues, potentially leading to unauthorized root access.
Vulnerability Detail
CVE-2022-41973 affects multipath-tools versions 0.7.7 through 0.9.x prior to 0.9.2. The vulnerability arises from improper handling of symbolic links in the multipathd daemon, which allows local users with access to /dev/shm to manipulate symlinks. This can lead to controlled file writes outside of the /dev/shm directory, enabling local privilege escalation to root. The vulnerability is compounded when exploited alongside CVE-2022-41974, increasing the risk of unauthorized access and system compromise.
How To Fix
Minimum fixed version
0.8.5-2+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade multipath-toolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, restrict access to /dev/shm for unprivileged users to mitigate the risk of exploitation until the package can be updated. This can be done by modifying permissions or using access control lists (ACLs).
Conclusion
CVE-2022-41973 is a significant vulnerability in the multipath-tools package that poses a risk of local privilege escalation. It is crucial for users to update their systems to the latest versions to mitigate this risk. Implementing temporary workarounds can help reduce exposure until a proper fix is applied.
See every vulnerability recorded for multipath-tools →
FAQ
CVE-2022-41973 is a vulnerability in the multipath-tools package that allows local users to escalate their privileges to root due to improper symlink handling.
Versions 0.7.7 through 0.9.x before 0.9.2 are affected by this vulnerability.
You can check your system for this vulnerability by using tools like Vulert, which monitors open-source vulnerabilities in your software using a manifest file.
If immediate updates are not possible, consider restricting access to /dev/shm for unprivileged users as a temporary workaround.
The CVSS score for CVE-2022-41973 is 7.8, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for multipath-tools.
