CVE-2022-3787
Assigner: redhat
Published: 2023-03-29T00:00:00
State: PUBLISHED
descriptions: value: A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This issue occurs because an attacker can repeat a keyword, which is mishandled when arithmetic ADD is used instead of bitwise OR. This could lead to local privilege escalation to root.
affected: vendor: n/a
product: device-mapper-multipath
versions: version: unknown
status: affected
problemTypes: descriptions: type: CWE
description: CWE-285
cweId: CWE-285