CVE-2022-44033 - Vulnerability Details - OpenCVE

An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cm4040_open() and reader_detach().

No CVSS v4.0

Attack Vector Physical

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0002.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

Configuration 1 [-]

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15
https://lore.kernel.org/lkml/20220915020834.GA110086%40ubuntu/
https://lore.kernel.org/lkml/20220919040457.GA302681%40ubuntu/
https://lore.kernel.org/lkml/20220919040457.GA302681@ubuntu/
https://nvd.nist.gov/vuln/detail/CVE-2022-44033
https://www.cve.org/CVERecord?id=CVE-2022-44033

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-10-30T00:00:00

Updated: 2024-08-03T13:47:05.476Z

Reserved: 2022-10-30T00:00:00

Link: CVE-2022-44033

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-10-30T01:15:08.880

Modified: 2024-11-21T07:27:34.690

Link: CVE-2022-44033

Redhat

Severity : Moderate

Publid Date: 2022-09-18T06:30:00Z

Links: CVE-2022-44033 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C384EDFF-DCA5-4E59-B662-29F5CE22B0BF", "versionEndIncluding": "6.0.6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cm4040_open() and reader_detach()."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en el kernel de Linux hasta la versi\u00f3n 6.0.6. drivers/char/pcmcia/cm4040_cs.c tiene una condici\u00f3n de ejecuci\u00f3n y Use-After-Free resultante si un atacante f\u00edsicamente cercano elimina un dispositivo PCMCIA mientras llama a open(), tambi\u00e9n conocido como una condici\u00f3n de ejecuci\u00f3n entre cm4040_open() y Reader_detach()."}], "id": "CVE-2022-44033", "lastModified": "2024-11-21T07:27:34.690", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-10-30T01:15:08.880", "references": [{"source": "cve@mitre.org", "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15"}, {"source": "cve@mitre.org", "url": "https://lore.kernel.org/lkml/20220915020834.GA110086%40ubuntu/"}, {"source": "cve@mitre.org", "url": "https://lore.kernel.org/lkml/20220919040457.GA302681%40ubuntu/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lore.kernel.org/lkml/20220915020834.GA110086%40ubuntu/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lore.kernel.org/lkml/20220919040457.GA302681%40ubuntu/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "Kernel: A race condition between cm4040_open() and reader_detach() may result in UAF", "id": "2162096", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2162096"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.4", "cvss3_scoring_vector": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-416", "details": ["An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cm4040_open() and reader_detach().", "A use-after-free flaw was found in the Linux Kernel. This issue occurs due to a race between cm4040_open() and reader_detach() in drivers/char/pcmcia/cm4040_cs.c when a physically proximate attacker removes a PCMCIA device while calling open()."], "mitigation": {"lang": "en:us", "value": "This flaw can be mitigated by preventing the affected CardMan 4040 kernel module from loading during the boot time, ensure the module is added into the blacklist file.\n~~~\nRefer: \nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278\n~~~"}, "name": "CVE-2022-44033", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2022-09-18T06:30:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-44033\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-44033\nhttps://lore.kernel.org/lkml/20220919040457.GA302681@ubuntu/"], "threat_severity": "Moderate"}