{"id":105612,"date":"2022-11-17T21:36:40","date_gmt":"2022-11-17T19:36:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-realizaczii-protokola-mctp-dlya-linux-pozvolyayushhaya-povysit-svoi-privilegii"},"modified":"2022-11-17T21:36:40","modified_gmt":"2022-11-17T19:36:40","slug":"uyazvimost-v-realizaczii-protokola-mctp-dlya-linux-pozvolyayushhaya-povysit-svoi-privilegii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/uyazvimost-v-realizaczii-protokola-mctp-dlya-linux-pozvolyayushhaya-povysit-svoi-privilegii","title":{"rendered":"A vulnerability in the implementation of the MCTP protocol for Linux, allowing privilege escalation.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A vulnerability has been identified in the Linux kernel (CVE-2022-3977) that can potentially be exploited by a local user to escalate their privileges on the system. This vulnerability affects kernels starting from version 5.18 and has been addressed in the 6.1 branch. The release of patches can be tracked in the following distributions: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch. <\/p>\n
The vulnerability exists in the implementation of the MCTP (Management Component Transport Protocol), which is used for communication between management controllers and associated devices. The issue is caused by a race condition in the function mctp_sk_unhash(), leading to a use-after-free when an ioctl DROPTAG request is sent simultaneously with closing the socket. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"