Auth bypass in Linux Kernel
CVE-2022-2503
Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.9 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.004 (29.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 29th percentile — 29.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Linux Kernel
- Linux Kernel — versions unspecified
Weakness classification (CWE)
References
- github.com/google/security-research/security/advisories/GHSA-6vq3-w69p-w63m (Exploit, Patch, Third Party Advisory)
- security.netapp.com/advisory/ntap-20230214-0005/
Frequently asked questions
- What is CVE-2022-2503?
- CVE-2022-2503 is a medium-severity vulnerability in Linux Kernel, classified under Authentication Bypass by Assumed-Immutable Data. CVSS score: 6.9/10. Published 2022-08-12.
- How severe is CVE-2022-2503?
- Medium severity. CVSS v3 base score is 6.9 out of 10.