Skip to content

Linux kernel: POSIX CPU timer UAF

Moderate
frezbo published GHSA-9638-5xg5-fgwm Sep 1, 2022

Package

No package listed

Affected versions

< 1.2.0

Patched versions

>= 1.2.0

Description

Impact

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.

Patches

The fix has been backported to 5.15.61 version of the upstream Linux kernel (5.15 is the upstream Kernel long term version Talos ships with). Talos >= v1.2.0 is shipped with Linux Kernel 5.15.64 fixing the above issue.

Workarounds

It's recommended to upgrade.

References

For more information

If you have any questions or comments about this advisory:

Severity

Moderate

CVE ID

CVE-2022-2585

Weaknesses

No CWEs