CVE-2022-24122

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.14 through 5.16.4

Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the kernel/ucount.c file, when unprivileged user namespaces are enabled. This allows a ucounts object to outlive its namespace, potentially leading to privilege escalation. The problem is associated with the handling of rlimit restrictions in different user namespaces.

Recommendations For Linux kernel versions 5.14 through 5.16.4, update to version 5.16.5 or 5.15.19 to resolve the issue. As a temporary workaround, consider disabling unprivileged user namespaces until a patch is available. Restrict access to the vulnerable ucount mechanism to minimize the risk of exploitation.