{"id":104289,"date":"2022-06-06T09:36:38","date_gmt":"2022-06-06T07:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter"},"modified":"2022-06-06T09:36:38","modified_gmt":"2022-06-06T07:36:38","slug":"eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","title":{"rendered":"Another vulnerability in the Linux Netfilter kernel subsystem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A vulnerability has been identified in the Netfilter kernel subsystem (CVE-2022-1972), similar to an issue disclosed at the end of May. This new vulnerability also allows a local user to gain root privileges in the system through manipulation of nftables rules and requires access to nftables, which can be obtained in a separate namespace (network namespace or user namespace) with CLONE_NEWUSER, CLONE_NEWNS, or CLONE_NEWNET rights (for example, when it is possible to run an isolated container). <\/p>\n
The issue is caused by an error in the code for processing set lists with fields that include multiple ranges, leading to writes beyond the allocated memory when handling specially formatted list parameters. Researchers have managed to prepare a working exploit to gain root privileges in Ubuntu 21.10 with kernel 5.13.0-39-generic. The vulnerability manifests starting from kernel 5.6. A fix has been proposed in the form of a patch. To block exploitation of the vulnerability in regular systems, ensure that the creation of user namespaces by unprivileged users is disabled (\"sudo sysctl -w kernel.unprivileged_userns_clone=0\"). <\/p>\n
Additionally, information has been released about three vulnerabilities in the kernel related to the NFC subsystem. These vulnerabilities allow a crash to be triggered by an unprivileged user (more dangerous attack vectors have not yet been demonstrated): <\/p>\n
\n
CVE-2022-1734 \u2014 a use-after-free issue in the nfcmrvl driver (drivers\/nfc\/nfcmrvl), which appears when simulating an NFC device in user space.\n
CVE-2022-1974 \u2014 a use-after-free issue in netlink functions for NFC devices (\/net\/nfc\/core.c), which manifests when registering a new device. As with the previous vulnerability, this issue can be exploited through the simulation of an NFC device in user space.\n
CVE-2022-1975 \u2014 a bug in the firmware loading code for NFC devices that can be used to trigger a \"panic\" state. <\/ul>\n