CVE-2022-49180
MEDIUMLinux Kernel - General Protection Fault in LSM Legacy Parameter Parsing
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: LSM: general protection fault in legacy_parse_param The usual LSM hook "bail on fail" scheme doesn't work for cases where a security module may return an error code indicating that it does not recognize an input. In this particular case Smack sees a mount option that it recognizes, and returns 0. A call to a BPF hook follows, which returns -ENOPARAM, which confuses the caller because Smack has processed its data. The SELinux hook incorrectly returns 1 on success. There was a time when this was correct, however the current expectation is that it return 0 on success. This is repaired.
References (6)
Core 6
Core References
Scores
CVSS v3
5.5
EPSS
0.0026
EPSS Percentile
18.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (20)
linux/Kernel
5.1.0 - 5.4.189linux
linux/Kernel
5.11.0 - 5.15.33linux
linux/Kernel
5.16.0 - 5.16.19linux
linux/Kernel
5.17.0 - 5.17.2linux
linux/Kernel
5.5.0 - 5.10.110linux
Linux/Linux
< 5.1
Linux/Linux
5.1
Linux/Linux
5.10.110 - 5.10.*
Linux/Linux
5.15.33 - 5.15.*
Linux/Linux
5.16.19 - 5.16.*
... and 10 more
Published
Feb 26, 2025
Tracked Since
Feb 18, 2026