Critical ULP Protection Check Vulnerability in Linux Kernel
Summary
CVE-2022-49732: In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 ("sock: Introduce sk->sk_prot->psock_update_sk_prot()") has moved the inet_csk_has_ulp(... Affects linux versions < 5.18.14-1. Fixed in 5.18.14-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for all other parts of the system. It manages hardware resources, system calls, and provides a foundation for application execution. This vulnerability affects the kernel's socket handling, particularly in the context of user-level protocols (ULPs), which can lead to potential security risks if not addressed.
Vulnerability Detail
In the Linux kernel, a vulnerability was identified where the protection check for user-level protocols (ULPs) was improperly handled. The issue arose from a commit that moved the inet_csk_has_ulp check from the sk_psock_init function to tcp_bpf_update_proto. This change allowed for the creation of psocks for non-inet sockets but neglected to ensure that the initialization process would fail if a ULP was already present. As a result, this oversight could lead to recursive callback loops, potentially compromising system stability and security.
How To Fix
Minimum fixed version
5.18.14-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate any risks.
Conclusion
The CVE-2022-49732 vulnerability in the Linux kernel poses significant risks due to improper handling of user-level protocols. It is crucial to update to the patched version 5.18.14-1 to mitigate these risks. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49732 is a vulnerability in the Linux kernel that affects the handling of user-level protocols, potentially leading to recursive callback loops.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
The risks include potential system instability and security breaches due to improper handling of user-level protocols, which could allow for unauthorized access or denial of service.
Yes, a patch is available in version 5.18.14-1 of the Linux package for Debian 12 and 13.
You can use tools like Vulert to monitor your applications for vulnerabilities in real-time, ensuring you are alerted to any issues as they arise.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
