A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.3.2 (Operating System). Affected is the function ieee802154_create of the file net/ieee802154/socket.c of the component AF_IEEE802154 Network Module. The manipulation with an unknown input leads to a default permission vulnerability. CWE is classifying the issue as CWE-276. During installation, installed file permissions are set to allow anyone to modify those files. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.

The weakness was presented 10/01/2019 by Ori Nimron as confirmed git commit (GIT Repository). The advisory is shared for download at git.kernel.org. The public release was coordinated in cooperation with the vendor. This vulnerability is traded as CVE-2019-17053 since 10/01/2019. The attack needs to be approached locally. A authentication is required for exploitation. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1222. The advisory points out:

Ori Nimron pointed out that there are a number of places in the kernel where you can create a raw socket, without having to have the CAP_NET_RAW permission.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The vulnerability will be addressed with the following lines of code:

rc = -EPERM;
if (!capable(CAP_NET_RAW))
   goto out;

To resolve this, here's a short patch series to test these odd and old protocols for this permission before allowing the creation to succeed

See 142787, 142789, 142790 and 142791 for similar entries.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 5.3.0
• 5.3.1
• 5.3.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion