Published: 08/01/2024 Updated: 19/01/2024

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 0

It exists that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 20.04
canonical ubuntu linux 22.04

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2022-2585 A use-after-free flaw in the implementation of POSIX CPU timers may result in denial of service or in local privilege escalation CVE-2022-2586 A use-after-free in the Netfilter ...

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated ...

Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this upd ...

Several security issues were fixed in the Linux kernel ...

A use-after-free flaw was found in the Linux kernel's POSIX CPU timers functionality in the way a user creates and then deletes the timer in the non-leader thread of the program This flaw allows a local user to crash or potentially escalate their privileges on the system (CVE-2022-2585) ...

A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages This flaw allows a local user to crash or potentially escalate their privileges on the system (CVE-2022-1679) A flaw was found in the Linux kernel's KVM when attempt ...

A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages This flaw allows a local user to crash or potentially escalate their privileges on the system (CVE-2022-1679) A use-after-free flaw was found in the Linux kernel's P ...

A flaw was found in the Linux kernel The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV) (CVE-2022-0171) An out-of-bounds read flaw was found in the Linux kernel's TeleT ...

PoC of various bugs in the Linux kernel

2022-LPE-UAF Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code Paper on Dirtycred by Zhenpeng zplinme/papers/DirtyCred-Zhenpengpdf Patches for DirtyCred and the public release of the exploit githubcom/Markakd/DirtyCred CVE-2022-2585 - Linux kern

CWE-416 https://ubuntu.com/security/notices/USN-5566-1 https://ubuntu.com/security/notices/USN-5564-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2585 https://ubuntu.com/security/notices/USN-5567-1 https://lore.kernel.org/lkml/20220809170751.164716-1-cascardo@canonical.com/T/#u https://www.openwall.com/lists/oss-security/2022/08/09/7 https://ubuntu.com/security/notices/USN-5565-1 https://nvd.nist.gov https://www.debian.org/security/2022/dsa-5207 https://github.com/greek0x0/2022-LPE-UAF https://ubuntu.com/security/notices/USN-5565-1

CVE-2022-2585

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect