{"id":104810,"date":"2022-08-10T21:36:44","date_gmt":"2022-08-10T19:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-yadre-linux-vyyavleny-ekspluatiruemye-uyazvimosti-v-posix-cpu-timer-cls_route-i-nf_tables"},"modified":"2022-08-10T21:36:44","modified_gmt":"2022-08-10T19:36:44","slug":"v-yadre-linux-vyyavleny-ekspluatiruemye-uyazvimosti-v-posix-cpu-timer-cls_route-i-nf_tables","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-yadre-linux-vyyavleny-ekspluatiruemye-uyazvimosti-v-posix-cpu-timer-cls_route-i-nf_tables","title":{"rendered":"Exploitable vulnerabilities identified in the Linux kernel for POSIX CPU timer, cls_route, and nf_tables","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Several vulnerabilities have been identified in the Linux kernel, caused by access to already freed memory areas, allowing a local user to elevate their privileges within the system. Working prototypes of exploits for all the identified issues have been created and will be published a week after the vulnerabilities are disclosed. Patches addressing these issues have been sent to the Linux kernel developers. <\/p>\n
\n
CVE-2022-2588 \u2014 a vulnerability in the cls_route filter implementation, caused by a bug that prevents the old filter from being removed from the hash table during the processing of a null descriptor until memory is cleared. The vulnerability exists starting from release 2.6.12-rc2. To conduct an attack, CAP_NET_ADMIN permissions are required, which can be obtained with access to create network namespaces or user namespaces. As a workaround, you can disable the cls_route module by adding the line 'install cls_route \/bin\/true' to modprobe.conf.\n
CVE-2022-2586 \u2014 a vulnerability in the netfilter subsystem within the nf_tables module that supports the nftables packet filter. The issue arises because an nft object can reference a set list in another table, leading to a dereference of freed memory after that table has been deleted. The vulnerability exists starting from release 3.16-rc1. To conduct an attack, CAP_NET_ADMIN permissions are required, which can be obtained with access to create network namespaces or user namespaces.\n
CVE-2022-2585 \u2014 a vulnerability in the POSIX CPU timer, caused by the timer structure remaining in the list when called from a non-leading thread, despite the clearing of the allocated memory for storage. The vulnerability exists starting from release 3.16-rc1. <\/ul>\n