CVE-2022-41974: debian debian_linux Improper Privilege Management
Vulnerability summary
CVE-2022-41974 is a high (CVSS 7.8) Improper Privilege Management vulnerability in debian debian_linux. EPSS estimates a 0.64% chance of exploitation in the next 30 days, higher than 49.8% of scored vulnerabilities. 7 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 10 · Related 6Timeline
- 29-10-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · Red hatEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.64%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
+0.01 pp
From 0.63% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
7 foundExploit Reference (openwall.com)
Maturity: unknown
Exploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Show all 7 exploits
Exploit Reference (qualys.com)
Maturity: unknown
Exploit Reference (openwall.com)
Maturity: unknown
Exploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Suse10 products
- multipath-tools&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 0.7.3+173+suse.7dd1b01-150000.3.29.1
- multipath-tools&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 0.7.3+173+suse.7dd1b01-150000.3.29.1
- multipath-tools&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 0.6.2+suse20221017.514d453-71.26.1
- multipath-tools&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 0.7.1+125+suse.c18e287-2.23.1
- multipath-tools&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 0.7.3+177+suse.b16d5dc-2.23.1
Debian2 products
- multipath-tools< 0.9.4-1
- debian_linuxEOL10.0 | 11.0
Opensuse2 products
- multipath-tools&distro=openSUSE Leap 15.3< 0.7.3+173+suse.7dd1b01-150000.3.29.1
- multipath-tools&distro=openSUSE Leap 15.4< 0.7.3+173+suse.7dd1b01-150000.3.29.1
Fedoraproject1 product
- fedoraEOL36
Opensvc1 product
- multipath-tools≥ 0.7.0, < 0.9.2
Redhat1 product
- device-mapper-multipath< 0:0.8.7-7.el9_0.1 | < 0:0.4.9-136.el7_9 | < 0:0.8.0-5.el8_1.1 | < 0:0.8.3-3.el8_2.7 | < 0:0.8.4-10.el8_4.4 | < 0:0.8.4-22.el8_6.2
Ubuntu1 product
- multipath-toolsAll versions (No fix recorded) | < 0.7.4-2ubuntu3.2 | < 0.8.3-1ubuntu2.1 | < 0.8.8-1ubuntu1.22.04.1
7 vendors · 18 products
References
47 links- packetstormsecurity.com/files/169611/Leeloo-Multipath-Authorization-Bypass-Symlink-Attack.htmlExploitMailing ListThird Party AdvisoryVDB Entry
- lists.fedoraproject.org/archives/…Vendor Advisory
- www.qualys.com/2022/10/24/leeloo-multipath/leeloo-multipath.txtARTICLEREPORTExploitThird Party Advisory
- packetstormsecurity.com/files/170176/snap-confine-must_mkdir_and_open_with_perms-Race-Condition.htmlExploitThird Party AdvisoryVDB Entry
Show all 47 references
- security.gentoo.org/glsa/202311-06Vendor Advisory
