Privilege Escalation Vulnerability in linux-raspi2 Package
Summary
UBUNTU-CVE-2022-36397: Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access. Affects linux-raspi2 versions 5.3.0-1007.8 – 5.4.0-1006.6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-raspi2 package is a kernel package designed for Raspberry Pi devices running Ubuntu. It provides essential functionalities for the hardware, enabling efficient operation and management of the device. However, certain versions of this package are vulnerable to a security flaw that could allow authenticated users to escalate their privileges.
Vulnerability Detail
The vulnerability, identified as CVE-2022-36397, stems from incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux prior to version 4.17. This flaw allows authenticated users to potentially escalate their privileges through local access, posing a significant security risk. The CVSS score for this vulnerability is 7.8, indicating a high severity level.
How To Fix
No fixed version is published for this vulnerability.
To rectify this vulnerability, it is recommended to update the linux-raspi2 package to the patched version. You can do this by running the following command in your terminal:
sudo apt update && sudo apt upgrade linux-raspi2
Ensure that your system is connected to the internet to download the latest updates.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can restrict access to the affected software installer by modifying its permissions. Use the following command to change permissions: 'sudo chmod 700 /path/to/installer'. Replace '/path/to/installer' with the actual path to the installer.
Conclusion
In summary, CVE-2022-36397 is a significant privilege escalation vulnerability affecting the linux-raspi2 package. Users are advised to update their packages promptly to mitigate the risk associated with this flaw. Temporary workarounds are available for those unable to update immediately.
See every vulnerability recorded for linux-raspi2 →
FAQ
CVE-2022-36397 is a vulnerability in the linux-raspi2 package that allows authenticated users to escalate their privileges due to incorrect default permissions.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
If you cannot update the package right away, consider applying the temporary workaround by changing the permissions of the affected installer.
The vulnerability could allow an authenticated user to gain elevated privileges, potentially leading to unauthorized access and control over the system.
Yes, a patched version of the linux-raspi2 package is available. Updating to this version will resolve the vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux-raspi2.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.