CVE-2022-3424

2022-10-1000:00:00

ubuntu.com

linux kernel

sgi gru driver

local privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the
way the first gru_file_unlocked_ioctl function is called by the user, where
a fail pass occurs in the gru_check_chiplet_assignment function. This flaw
allows a local user to crash or potentially escalate their privileges on
the system.

Bugs

Notes

Author	Note
sbeattie	unfixed upstream as of 2022/11/28
rodrigo-zaiden	USN-5975-1 first publication included esm/xenial linux-gcp version 4.15.0-1146.162~16.04.1 by mistake, it got fixed in version 4.15.0-1147.163~16.04.1 as published in USN-6009-1.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-208.220UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-144.161UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-69.76UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-40.41UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1153.166UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1097.105UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1033.37UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1023.24UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1033.37~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1097.105~18.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-208.220	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-144.161	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-69.76	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-40.41	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1153.166	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1097.105	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1033.37	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1023.24	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1033.37~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1097.105~18.04.1	UNKNOWN