Skip to content
fr Sign in
6.9 Medium

CVE-2022-2503 Dm-verity is used for extending root-of-trust to root filesystems

Description

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5

Affected products and versions

Product Affected versions Fixed in
Linux Kernel Versions not published
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 earliest → < 1.1 1.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Linux Kernel

The 11 CVEs of Linux Kernel →
CVE-2022-2327 io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is… 7.5 High CVE-2021-22543 An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks… 8.7 High CVE-2021-23134 Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their… 7.8 High CVE-2021-23133 A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege… 6.7 Medium
Track this CVE