Critical FPU Permissions Inheritance Vulnerability in Linux Kernel
Summary
CVE-2022-49783: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following against an old fork of preempt-rt but the same issue a... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware resources and providing essential services for software applications. It is known for its stability, performance, and security features. However, vulnerabilities can arise, such as the one identified in CVE-2022-49783, which affects the handling of Floating Point Unit (FPU) permissions during process cloning.
Vulnerability Detail
CVE-2022-49783 is a vulnerability in the Linux kernel that allows improper handling of FPU permissions due to a locking issue. The problem originates from the fpu_inherit_perms() function being called while the fpregs_lock is held, which can lead to a deadlock situation when preemption is disabled. This vulnerability can potentially allow a denial of service or system instability, particularly in environments using the PREEMPT_RT kernel. The issue has been present since commit 9e798e9aa14c, which prepared fpu_clone() for dynamically enabled features, but the paths should not have been enabled in the first place.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it is available to mitigate any risks associated with this issue.
Conclusion
CVE-2022-49783 is a critical vulnerability in the Linux kernel that affects FPU permissions during process cloning. It is essential for users to update their systems to the patched version to avoid potential system instability. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49783 is a vulnerability in the Linux kernel related to improper handling of FPU permissions during process cloning, which can lead to system instability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By checking your manifest file like package-lock.json, Vulert can alert you in real-time about any vulnerabilities.
The vulnerability can lead to denial of service or system instability, particularly in environments using the PREEMPT_RT kernel.
Yes, a patch is available in version 6.0.10-1 of the Linux package. It is recommended to update to this version to mitigate the vulnerability.
You can update your Linux package by running the command 'sudo apt-get update && sudo apt-get install linux=6.0.10-1' in your terminal.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
