CVE-2022-3787

Name of the Vulnerable Software and Affected Versions device-mapper-multipath (affected versions not specified)

Description A local privilege escalation issue exists, allowing local users to obtain root access by exploiting a flaw in the handling of UNIX domain sockets. This can be achieved by manipulating the multipath setup, taking advantage of the mishandling of repeated keywords when arithmetic ADD is used instead of bitwise OR.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.