In the Linux kernel, the following vulnerability has been resolved:
LSM: general protection fault in legacyparseparam
The usual LSM hook "bail on fail" scheme doesn't work for cases where a security module may return an error code indicating that it does not recognize an input. In this particular case Smack sees a mount option that it recognizes, and returns 0. A call to a BPF hook follows, which returns -ENOPARAM, which confuses the caller because Smack has processed its data.
The SELinux hook incorrectly returns 1 on success. There was a time when this was correct, however the current expectation is that it return 0 on success. This is repaired.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ddcdda888e14ca451b3ee83d11b65b2a9c8e783b",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-00f588fe",
"digest": {
"threshold": 0.9,
"line_hashes": [
"266577784037020305080228300350031346113",
"85427152545357326009170031789400601310",
"283497066798544886123202171230056971720",
"213483257433499792821548016456017861785",
"232788988207035830291038876976194296261",
"14705569523669249404986388475315780582",
"16050135096547956783705223557978223054"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3f93a1aaafc3032e0a9655fb43deccfb3e953a3",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/security.c"
},
"id": "CVE-2022-49180-0bfe290c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"275551809960756904345601363745500250887",
"47096857604207035597064862395270705807",
"153390173396932406099052118058180008466",
"303464492343834878488383044015595212081",
"9426958884283969194441477881861534525",
"174903364285077384011491392932656136703"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecff30575b5ad0eda149aadad247b7f75411fd47",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-160fe140",
"digest": {
"threshold": 0.9,
"line_hashes": [
"266577784037020305080228300350031346113",
"85427152545357326009170031789400601310",
"283497066798544886123202171230056971720",
"213483257433499792821548016456017861785",
"232788988207035830291038876976194296261",
"14705569523669249404986388475315780582",
"16050135096547956783705223557978223054"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2784604c8c6fc523248f8f80a421c313a9d790b7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "security_fs_context_parse_param",
"file": "security/security.c"
},
"id": "CVE-2022-49180-362b5534",
"digest": {
"length": 126.0,
"function_hash": "247145742464435359859148758164353063868"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2784604c8c6fc523248f8f80a421c313a9d790b7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-39ecbb23",
"digest": {
"threshold": 0.9,
"line_hashes": [
"266577784037020305080228300350031346113",
"85427152545357326009170031789400601310",
"283497066798544886123202171230056971720",
"213483257433499792821548016456017861785",
"232788988207035830291038876976194296261",
"14705569523669249404986388475315780582",
"16050135096547956783705223557978223054"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cadae7c5e477aaafcba819b8e4a3d1c1a1503b62",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-3d3cd800",
"digest": {
"threshold": 0.9,
"line_hashes": [
"266577784037020305080228300350031346113",
"85427152545357326009170031789400601310",
"283497066798544886123202171230056971720",
"213483257433499792821548016456017861785",
"232788988207035830291038876976194296261",
"14705569523669249404986388475315780582",
"16050135096547956783705223557978223054"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cadae7c5e477aaafcba819b8e4a3d1c1a1503b62",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "security_fs_context_parse_param",
"file": "security/security.c"
},
"id": "CVE-2022-49180-3fe6923d",
"digest": {
"length": 126.0,
"function_hash": "247145742464435359859148758164353063868"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecff30575b5ad0eda149aadad247b7f75411fd47",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "selinux_fs_context_parse_param",
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-5e7b0195",
"digest": {
"length": 314.0,
"function_hash": "254323441855272242125479793868901056801"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecff30575b5ad0eda149aadad247b7f75411fd47",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "security_fs_context_parse_param",
"file": "security/security.c"
},
"id": "CVE-2022-49180-6f0651ec",
"digest": {
"length": 126.0,
"function_hash": "247145742464435359859148758164353063868"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00fc07fa0b4a004711b6e1a944f0d2e46f7093b7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/security.c"
},
"id": "CVE-2022-49180-7277e508",
"digest": {
"threshold": 0.9,
"line_hashes": [
"275551809960756904345601363745500250887",
"47096857604207035597064862395270705807",
"153390173396932406099052118058180008466",
"303464492343834878488383044015595212081",
"9426958884283969194441477881861534525",
"174903364285077384011491392932656136703"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ddcdda888e14ca451b3ee83d11b65b2a9c8e783b",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/security.c"
},
"id": "CVE-2022-49180-763946d1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"275551809960756904345601363745500250887",
"47096857604207035597064862395270705807",
"153390173396932406099052118058180008466",
"303464492343834878488383044015595212081",
"9426958884283969194441477881861534525",
"174903364285077384011491392932656136703"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3f93a1aaafc3032e0a9655fb43deccfb3e953a3",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-7fc3feca",
"digest": {
"threshold": 0.9,
"line_hashes": [
"266577784037020305080228300350031346113",
"85427152545357326009170031789400601310",
"283497066798544886123202171230056971720",
"213483257433499792821548016456017861785",
"232788988207035830291038876976194296261",
"14705569523669249404986388475315780582",
"16050135096547956783705223557978223054"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00fc07fa0b4a004711b6e1a944f0d2e46f7093b7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-80b15da3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"266577784037020305080228300350031346113",
"85427152545357326009170031789400601310",
"283497066798544886123202171230056971720",
"213483257433499792821548016456017861785",
"232788988207035830291038876976194296261",
"14705569523669249404986388475315780582",
"16050135096547956783705223557978223054"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2784604c8c6fc523248f8f80a421c313a9d790b7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "selinux_fs_context_parse_param",
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-90733ffb",
"digest": {
"length": 314.0,
"function_hash": "254323441855272242125479793868901056801"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cadae7c5e477aaafcba819b8e4a3d1c1a1503b62",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "selinux_fs_context_parse_param",
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-94529c03",
"digest": {
"length": 314.0,
"function_hash": "254323441855272242125479793868901056801"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2784604c8c6fc523248f8f80a421c313a9d790b7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/security.c"
},
"id": "CVE-2022-49180-988582dd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"275551809960756904345601363745500250887",
"47096857604207035597064862395270705807",
"153390173396932406099052118058180008466",
"303464492343834878488383044015595212081",
"9426958884283969194441477881861534525",
"174903364285077384011491392932656136703"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00fc07fa0b4a004711b6e1a944f0d2e46f7093b7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "security_fs_context_parse_param",
"file": "security/security.c"
},
"id": "CVE-2022-49180-9bd27056",
"digest": {
"length": 126.0,
"function_hash": "247145742464435359859148758164353063868"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecff30575b5ad0eda149aadad247b7f75411fd47",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/security.c"
},
"id": "CVE-2022-49180-af5efc5f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"275551809960756904345601363745500250887",
"47096857604207035597064862395270705807",
"153390173396932406099052118058180008466",
"303464492343834878488383044015595212081",
"9426958884283969194441477881861534525",
"174903364285077384011491392932656136703"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3f93a1aaafc3032e0a9655fb43deccfb3e953a3",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "selinux_fs_context_parse_param",
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-bc642f04",
"digest": {
"length": 314.0,
"function_hash": "254323441855272242125479793868901056801"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cadae7c5e477aaafcba819b8e4a3d1c1a1503b62",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "security/security.c"
},
"id": "CVE-2022-49180-ce6012b8",
"digest": {
"threshold": 0.9,
"line_hashes": [
"275551809960756904345601363745500250887",
"47096857604207035597064862395270705807",
"153390173396932406099052118058180008466",
"303464492343834878488383044015595212081",
"9426958884283969194441477881861534525",
"174903364285077384011491392932656136703"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ddcdda888e14ca451b3ee83d11b65b2a9c8e783b",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "selinux_fs_context_parse_param",
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-d9ee7829",
"digest": {
"length": 316.0,
"function_hash": "154707120297485893636821288807569151172"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00fc07fa0b4a004711b6e1a944f0d2e46f7093b7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "selinux_fs_context_parse_param",
"file": "security/selinux/hooks.c"
},
"id": "CVE-2022-49180-e7d60358",
"digest": {
"length": 314.0,
"function_hash": "254323441855272242125479793868901056801"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3f93a1aaafc3032e0a9655fb43deccfb3e953a3",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "security_fs_context_parse_param",
"file": "security/security.c"
},
"id": "CVE-2022-49180-ef706622",
"digest": {
"length": 126.0,
"function_hash": "247145742464435359859148758164353063868"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ddcdda888e14ca451b3ee83d11b65b2a9c8e783b",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "security_fs_context_parse_param",
"file": "security/security.c"
},
"id": "CVE-2022-49180-ff4b439d",
"digest": {
"length": 126.0,
"function_hash": "247145742464435359859148758164353063868"
},
"signature_type": "Function"
}
]