Stack Overflow Vulnerability in Linux Kernel Due to Kprobe Recursion
Summary
CVE-2022-49888: In the Linux kernel, the following vulnerability has been resolved: arm64: entry: avoid kprobe recursion The cortex_a76_erratum_1463225_debug_handler() function is called when handling debug exceptions (and synchronous e... Affects linux versions < 6.0.8-1. Fixed in 6.0.8-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to software applications. It is widely used in various distributions, including Debian. This vulnerability affects the arm64 architecture, specifically in the handling of debug exceptions, which can lead to severe system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified where the cortex_a76_erratum_1463225_debug_handler() function can be probed, leading to recursive exceptions and a potential stack overflow. This issue arises from a regression caused by a commit that removed the NOKPROBE_SYMBOL() annotation from the function. If exploited, this vulnerability can cause kernel panic and system crashes, severely impacting system reliability and security.
How To Fix
Minimum fixed version
6.0.8-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, avoiding the use of kprobes on the cortex_a76_erratum_1463225_debug_handler() function can help prevent triggering the issue until a patch is applied.
Conclusion
The CVE-2022-49888 vulnerability in the Linux kernel poses a significant risk due to its potential to cause stack overflow through kprobe recursion. Users are advised to update their systems to the latest patched version to mitigate this risk and ensure system stability.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49888 is a vulnerability in the Linux kernel that can lead to stack overflow due to kprobe recursion when handling debug exceptions.
The vulnerability affects all versions of the Linux kernel prior to 6.0.8-1.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Exploitation of this vulnerability can lead to kernel panic, system crashes, and overall instability of the operating system.
Yes, the permanent fix is to update to the patched version of the Linux kernel, which is 6.0.8-1 or later.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
