CVE-2022-23037— Linux 竞争条件问题漏洞
一分钟漏洞结论
影响对象
unspecified unspecified
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux是美国Linux基金会的开源操作系统。 Linux PV 设备存在安全漏洞，该漏洞源于竞争条件和 Linux 中缺少返回码测试，PV 设备前端驱动程序恶意后端可以访问（读取并写入）到它不应该有的内存页面，或者它可以直接在来宾中触发拒绝服务 (DoS)。
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2022-23037 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux 竞争条件问题漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux是美国Linux基金会的开源操作系统。 Linux PV 设备存在安全漏洞，该漏洞源于竞争条件和 Linux 中缺少返回码测试，PV 设备前端驱动程序恶意后端可以访问（读取并写入）到它不应该有的内存页面，或者它可以直接在来宾中触发拒绝服务 (DoS)。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| unspecified | unspecified | consult Xen advisory XSA-396 | - |
|
二、漏洞 CVE-2022-23037 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2022-23037 的情报信息
请登录查看更多情报信息。
CVE-2022-23037 邮件列表归档 (1)
CVE-2022-23037 其他参考 (1)
-
https://xenbits.xenproject.org/xsa/advisory-396.txt x_refsource_MISC
同批安全公告 · unspecified · 2022-03-10 · 共 7 条
| CVE-2022-23042 | Linux 竞争条件问题漏洞 | |
| CVE-2022-23041 | Linux 竞争条件问题漏洞 | |
| CVE-2022-23040 | Linux 竞争条件问题漏洞 | |
| CVE-2022-23039 | Linux 竞争条件问题漏洞 | |
| CVE-2022-23038 | Linux 竞争条件问题漏洞 | |
| CVE-2022-23036 | Linux 竞争条件问题漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2022-23037
暂无评论