Local Privilege Escalation in Multipath-Tools: CVE-2022-41974
Summary
CVE-2022-41974: multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Affects multipath-tools across 2 version ranges.
< 0.8.5-2+deb11u1
< 66664cdb52f548b821b2ea28e49613c068e9375d
Fixed in 0.8.5-2+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Multipath-tools is a package used in Linux environments to manage multiple paths to storage devices, enhancing redundancy and performance. It is crucial for systems that require high availability and reliability in data access. The package allows for configuration and management of multipath devices, but it has been found to have vulnerabilities that can be exploited by local users.
Vulnerability Detail
CVE-2022-41974 is a vulnerability in multipath-tools versions 0.7.0 through 0.9.x before 0.9.2 that allows local users to gain root access. This vulnerability can be exploited alone or in conjunction with CVE-2022-41973. The issue arises when local users, who can write to UNIX domain sockets, bypass access controls and manipulate the multipath setup. The vulnerability stems from the mishandling of a repeated keyword due to the use of arithmetic ADD instead of bitwise OR, leading to potential local privilege escalation.
How To Fix
Minimum fixed version
0.8.5-2+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade multipath-toolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate upgrading is not possible, consider restricting access to the UNIX domain sockets used by multipath-tools to prevent unauthorized local users from exploiting this vulnerability. This can be done by modifying the permissions of the socket files.
Conclusion
CVE-2022-41974 presents a significant risk for local privilege escalation in systems using vulnerable versions of multipath-tools. It is crucial for users to update their packages promptly to mitigate this risk and ensure system security.
See every vulnerability recorded for multipath-tools →
FAQ
CVE-2022-41974 is a vulnerability in the multipath-tools package that allows local users to escalate their privileges to root.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Exploitation of this vulnerability can lead to local privilege escalation, allowing unauthorized users to gain root access to the system.
Multipath-tools versions 0.7.0 through 0.9.x before 0.9.2 are affected by this vulnerability.
Yes, the permanent fix is to update the multipath-tools package to a version that is not affected by the vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for multipath-tools.
