CVE-2022-42432
Summary
| CVE | CVE-2022-42432 |
|---|---|
| State | PUBLISHED |
| Assigner | zdi |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-03-29 19:15:17 UTC |
| Updated | 2026-10-14 19:16:51 UTC |
| Description | This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the nft_osf_eval function. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-18540. |
Risk And Classification
Primary CVSS: v3.1 4.4 MEDIUM from [email protected]
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.006150000 probability, percentile 0.482300000 (date 2026-10-14)
Problem Types: CWE-457 | CWE-457 CWE-457: Use of Uninitialized Variable
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 4.4 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
| 3.0 | [email protected] | Secondary | 5.1 | MEDIUM | CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L |
| 3.0 | CNA | DECLARED | 5.1 | MEDIUM | CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v3.0 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
LowCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | 6.0 | rc2 | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Kernel | affected 6.0-rc2 | Not specified |
| ADP | Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem | affected V1.1 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [nf] netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - Patchwork | af854a3a-2127-422b-91ae-364da2661108 | patchwork.ozlabs.org | |
| cert-portal.siemens.com/productcert/html/ssa-794697.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| ZDI-22-1457 | Zero Day Initiative | af854a3a-2127-422b-91ae-364da2661108 | www.zerodayinitiative.com | Third Party Advisory, VDB Entry |
| [nf] netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() - Patchwork | MITRE | patchwork.ozlabs.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Gwangun Jung at THEORI (en)
Legacy QID Mappings
- 181721 Debian Security Update for linux (CVE-2022-42432)
- 378710 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0079)
- 379043 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0136)
- 672495 EulerOS Security Update for kernel (EulerOS-SA-2023-1012)
- 672516 EulerOS Security Update for kernel (EulerOS-SA-2023-1037)