6.9
Moyenne
CVE-2022-2503 Dm-verity is used for extending root-of-trust to root filesystems
Description
Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux Kernel | Versions non publiées | |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1 | 1.1 |
Autres CVE de Linux Kernel
Les 11 CVE de Linux Kernel →
CVE-2022-2327
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is…
7.5
Élevée
CVE-2021-22543
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks…
8.7
Élevée
CVE-2021-23134
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their…
7.8
Élevée
CVE-2021-23133
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
6.7
Moyenne