A Linux kernel vulnerability (CVE-2022-1729) has been identified, allowing a local user to gain root access to the system. This vulnerability is caused by a race condition in the perf subsystem, which can be exploited to initiate access to a previously freed area of kernel memory (use-after-free). The issue has been present since the release of kernel 4.0-rc1. Exploitation has been confirmed for releases 5.4.193+.
A fix is currently only available in the form of a patch. The danger of the vulnerability is mitigated by the fact that most distributions by default restrict access to perf for unprivileged users. As a workaround for protection, the sysctl parameter kernel.perf_event_paranoid can be set to 3.
Forrás: opennet.ru
