CVE-2022-42432
Fixed in a distro release EPSS <1%CVSS 5.1
This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the nft_osf_eval function. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-18540.
Products: Linux kernel, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 6.0.2-1 |
| Debian 13 | linux | 6.0.2-1 |
| Debian 14 | linux | 6.0.2-1 |
| Red Hat Enterprise Linux 9 | bpftool | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | bpftool-debuginfo | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-abi-stablelists | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-core | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debug | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debug-core | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debug-debuginfo | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debug-devel | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debug-devel-matched | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debug-modules | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debug-modules-extra | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debuginfo | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debuginfo-common-aarch64 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debuginfo-common-ppc64le | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debuginfo-common-s390x | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-debuginfo-common-x86_64 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-devel | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-devel-matched | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-doc | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-modules | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-modules-extra | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-core | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debug | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debug-core | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debug-debuginfo | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debug-devel | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debug-kvm | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debug-modules | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debug-modules-extra | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debuginfo | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-debuginfo-common-x86_64 | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-devel | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-kvm | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-modules | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-rt-modules-extra | 0:5.14.0-162.6.1.rt21.168.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-tools | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-tools-debuginfo | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-tools-libs | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-tools-libs-devel | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-zfcpdump | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-zfcpdump-core | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-zfcpdump-debuginfo | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-zfcpdump-devel | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-zfcpdump-devel-matched | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-zfcpdump-modules | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | kernel-zfcpdump-modules-extra | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | perf | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | perf-debuginfo | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | python3-perf | 0:5.14.0-162.6.1.el9_1 |
| Red Hat Enterprise Linux 9 | python3-perf-debuginfo | 0:5.14.0-162.6.1.el9_1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.4 | 5.4.0-1093.102~18.04.2 |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.4 | 5.4.0-1100.106~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.4 | 5.4.0-1097.106~18.04.1 |
| Ubuntu 18.04 LTS | linux-gke-4.15 | no fix |
| Ubuntu 18.04 LTS | linux-gke-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-gkeop-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-5.4 | 5.4.0-136.153~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-ibm-5.4 | 5.4.0-1041.46~18.04.1 |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.4 | 5.4.0-1091.100~18.04.1 |
| Ubuntu 18.04 LTS | linux-raspi-5.4 | 5.4.0-1078.89~18.04.1 |
| Ubuntu 20.04 LTS | linux | 5.4.0-136.153 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1093.101 |
| Ubuntu 20.04 LTS | linux-aws-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1027.31~20.04.1 |
| Ubuntu 20.04 LTS | linux-aws-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1100.106 |
| Ubuntu 20.04 LTS | linux-azure-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1030.37~20.04.1 |
| Ubuntu 20.04 LTS | linux-azure-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1054.60 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1097.106 |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1027.34~20.04.1 |
| Ubuntu 20.04 LTS | linux-gcp-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-gke | 5.4.0-1091.98 |
| Ubuntu 20.04 LTS | linux-gke-5.15 | 5.15.0-1027.32~20.04.1 |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1061.65 |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1012.16~20.04.1 |
| Ubuntu 20.04 LTS | linux-hwe-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.15 | 5.15.0-57.63~20.04.1 |
| Ubuntu 20.04 LTS | linux-hwe-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1041.46 |
| Ubuntu 20.04 LTS | linux-intel-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1023.28~20.04.1 |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1010.12 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1083.89 |
| Ubuntu 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-58.64~20.04.1 |
| Ubuntu 20.04 LTS | linux-oem-5.10 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.14 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.6 | no fix |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1091.100 |
| Ubuntu 20.04 LTS | linux-oracle-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1027.33~20.04.1 |
| Ubuntu 20.04 LTS | linux-oracle-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1078.89 |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1027.31~20.04.1 |
| Ubuntu 20.04 LTS | linux-riscv-5.8 | no fix |
| Ubuntu 22.04 LTS | linux | 5.15.0-57.63 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1027.31 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1030.37 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1030.37.1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1026.33 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1024.29 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1012.16 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1022.25 |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1023.28 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1025.30 |
| Ubuntu 22.04 LTS | linux-lowlatency | 5.15.0-57.63 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1015.15 |
| Ubuntu 22.04 LTS | linux-oem-5.17 | no fix |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1026.32 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1022.24 |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1093.101+fips1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1100.106+fips1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1069.78 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1097.106+fips1 |
| Ubuntu Pro FIPS 20.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1029.32 |