CVE-2022-0646

A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way user triggers cancel_work_sync after the unregister_netdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It is actual from Linux Kernel 5.17-rc1 (when mctp-serial.c introduced) till 5.17-rc5.

Score

CVSS 3.1 7.8 High

Status

Modified - secalert@redhat.com

Published

2022-02-18

Last modified

2024-08-02

Weaknesses

CWE-416, CWE-459

Affected products

• Linux Kernel (Linux)
• H300e Firmware (Netapp)
• H300s Firmware (Netapp)
• H410c Firmware (Netapp)
• H410s Firmware (Netapp)
• H500e Firmware (Netapp)
• H500s Firmware (Netapp)
• H700e Firmware (Netapp)
• H700s Firmware (Netapp)

References

• https://lore.kernel.org/all/20220211011552.1861886-1-jk%40codeconstruct.com.au
• https://security.netapp.com/advisory/ntap-20220318-0006/