Back to KEVs

CVE-2022-0185

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel...

Basic Information

CVE State
PUBLISHED
Reserved Date
January 11, 2022
Published Date
February 11, 2022
Last Updated
August 22, 2024
Vendor
n/a
Product
kernel
Description
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
Tags
linux cisa

CVSS Scores

CVSS v3.1

8.4 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

SSVC Information

Exploitation
active
Technical Impact
total

Exploit Status

Exploited in the Wild
Yes (2024-08-21 00:00:00 UTC) Source
Proof of Concept Available
Yes (added 2024-04-15 02:42:43 UTC) Source

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=722d94847de2 https://github.com/Crusaders-of-Rust/CVE-2022-0185 https://www.openwall.com/lists/oss-security/2022/01/18/7 https://www.willsroot.io/2022/01/cve-2022-0185.html https://security.netapp.com/advisory/ntap-20220225-0003/

Known Exploited Vulnerability Information

Source Added Date
CISA 2024-08-21 00:00:00 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

dcheng69/CVE-2022-0185-Case-Study

Type: github • Created: 2024-04-15 02:42:43 UTC • Stars: 3

featherL/CVE-2022-0185-exploit

Type: github • Created: 2022-04-14 10:46:04 UTC • Stars: 3

CVE-2022-0185 exploit

veritas501/CVE-2022-0185-PipeVersion

Type: github • Created: 2022-04-05 07:48:35 UTC • Stars: 16

CVE-2022-0185 exploit rewritten with pipe primitive

chenaotian/CVE-2022-0185

Type: github • Created: 2022-02-18 09:27:34 UTC • Stars: 37

CVE-2022-0185 POC and Docker and Analysis write up

Crusaders-of-Rust/CVE-2022-0185

Type: github • Created: 2022-01-19 06:19:38 UTC • Stars: 369

CVE-2022-0185

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Proof of Concept Exploit Available

  • Added to KEVIntel