{"id":"CVE-2022-41973","aliases":["ALSA-2023:2459","ALSA-2023:2948","AZL-11371","DEBIAN-CVE-2022-41973","DLA-3250-1","DSA-5366-1","EUVD-2022-45077","GHSA-6c7c-85qv-wvgp","MGASA-2024-0071","OESA-2022-2042","RHSA-2023:2459","RHSA-2023:2948","RHSA-2024:1110","SUSE-SU-2022:3707-1","SUSE-SU-2022:3708-1","SUSE-SU-2022:3709-1","SUSE-SU-2022:3710-1","SUSE-SU-2022:3711-1","UBUNTU-CVE-2022-41973","USN-5731-1","openSUSE-SU-2024:12443-1"],"status":"published","title":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as...","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00683,"percentile":0.52785,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2022-10-24T14:21:39Z","modified":"2026-11-03T08:03:15Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"device-mapper-multipath","fixed_in":["0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"device-mapper-multipath-devel","fixed_in":["0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"device-mapper-multipath-libs","fixed_in":["0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"kpartx","fixed_in":["0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"device-mapper-multipath","fixed_in":["0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"device-mapper-multipath-devel","fixed_in":["0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"device-mapper-multipath-libs","fixed_in":["0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"kpartx","fixed_in":["0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libdmmp","fixed_in":["0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"device-mapper-multipath","fixed_in":["0.8.6-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"multipath-tools","fixed_in":["0.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"multipath-tools","fixed_in":["0.9.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"multipath-tools","fixed_in":["0.9.4-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"multipath-tools","fixed_in":["0.8.4-16.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"multipath-tools","fixed_in":["0.8.4-16.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"multipath-tools","fixed_in":["0.8.7-5.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath-debuginfo","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath-debugsource","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath-libs","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath-libs-debuginfo","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpartx","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpartx-debuginfo","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libdmmp-debuginfo","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"device-mapper-multipath-debuginfo","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"device-mapper-multipath-debugsource","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"device-mapper-multipath-devel","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"device-mapper-multipath-libs-debuginfo","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kpartx-debuginfo","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libdmmp-debuginfo","fixed_in":["0:0.8.7-20.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath-debuginfo","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath-debugsource","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath-libs","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath-libs-debuginfo","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kpartx","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kpartx-debuginfo","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdmmp","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdmmp-debuginfo","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"device-mapper-multipath-debuginfo","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"device-mapper-multipath-debugsource","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"device-mapper-multipath-devel","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"device-mapper-multipath-libs-debuginfo","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kpartx-debuginfo","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdmmp-debuginfo","fixed_in":["0:0.8.4-37.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath-debuginfo","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath-debugsource","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath-libs","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath-libs-debuginfo","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"kpartx","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"kpartx-debuginfo","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libdmmp","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libdmmp-debuginfo","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"device-mapper-multipath-debuginfo","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"device-mapper-multipath-debugsource","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"device-mapper-multipath-devel","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"device-mapper-multipath-libs-debuginfo","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"kpartx-debuginfo","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"libdmmp-debuginfo","fixed_in":["0:0.8.4-22.el8_6.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"multipath-tools","fixed_in":["0.8.3-1ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"multipath-tools","fixed_in":["0.8.8-1ubuntu1.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"device-mapper-multipath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"device-mapper-multipath-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"device-mapper-multipath-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kpartx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"device-mapper-multipath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"device-mapper-multipath-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"device-mapper-multipath-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kpartx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libdmmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"device-mapper-multipath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.4-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9-3+deb10u2"}]}],"versions":["0.7.9-3","0.7.9-3+deb10u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.5-2+deb11u1"}]}],"versions":["0.8.5-2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.8-2.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-16.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4-16.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-5.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"device-mapper-multipath-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpartx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpartx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libdmmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"device-mapper-multipath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"device-mapper-multipath-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"device-mapper-multipath-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"device-mapper-multipath-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kpartx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libdmmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-20.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"device-mapper-multipath-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kpartx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kpartx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdmmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libdmmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"device-mapper-multipath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"device-mapper-multipath-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"device-mapper-multipath-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"device-mapper-multipath-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kpartx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libdmmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-37.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"device-mapper-multipath-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"kpartx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"kpartx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libdmmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libdmmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"device-mapper-multipath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"device-mapper-multipath-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"device-mapper-multipath-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"device-mapper-multipath-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"kpartx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"libdmmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-22.el8_6.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-150100.3.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-150100.3.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-150100.3.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-150100.3.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-150100.3.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9+232+suse.cbc3754-150100.3.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2+182.6d41865-150200.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.5+126+suse.8ce8da5-150300.2.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.5+126+suse.8ce8da5-150300.2.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.5+126+suse.8ce8da5-150300.2.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.5+126+suse.8ce8da5-150300.2.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.5+126+suse.8ce8da5-150300.2.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0+62+suse.3e048d4-150400.4.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0+62+suse.3e048d4-150400.4.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0+62+suse.3e048d4-150400.4.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-1ubuntu2.1"}]}],"versions":["0.7.9-3ubuntu6","0.7.9-3ubuntu7","0.8.3-1ubuntu1","0.8.3-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.8-1ubuntu1.22.04.1"}]}],"versions":["0.8.5-2ubuntu2","0.8.5-2ubuntu3","0.8.8-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.4-2ubuntu3.2"}]}],"versions":["0.6.4-5ubuntu1","0.7.4-2ubuntu1","0.7.4-2ubuntu3","0.7.4-2ubuntu3.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-1ubuntu2.1"}]}],"versions":["0.7.9-3ubuntu6","0.7.9-3ubuntu7","0.8.3-1ubuntu1","0.8.3-1ubuntu2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"multipath-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.8-1ubuntu1.22.04.1"}]}],"versions":["0.8.5-2ubuntu2","0.8.5-2ubuntu3","0.8.8-1ubuntu1"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensvc","product":"multipath-tools"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1202739","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/opensvc/multipath-tools/releases/tag/0.9.2","tags":["x_transferred","Release Notes","Third Party Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/10/24/2","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/25","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","article"]},{"url":"http://packetstormsecurity.com/files/169611/Leeloo-Multipath-Authorization-Bypass-Symlink-Attack.html","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory","VDB Entry","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIGZM5NOOMFDCITOLQEJNNX5SCRQLQVV/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://www.qualys.com/2022/10/24/leeloo-multipath/leeloo-multipath.txt","tags":["x_transferred","Exploit","Third Party Advisory","web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/30/2","tags":["mailing-list","x_transferred","Exploit","Third Party Advisory","article"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/4","tags":["mailing-list","x_transferred","Exploit","Third Party Advisory","article"]},{"url":"http://packetstormsecurity.com/files/170176/snap-confine-must_mkdir_and_open_with_perms-Race-Condition.html","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00037.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2023/dsa-5366","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202311-06","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41973","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QIGZM5NOOMFDCITOLQEJNNX5SCRQLQVV/"},{"url":"https://github.com/advisories/GHSA-6c7c-85qv-wvgp"},{"url":"https://access.redhat.com/errata/RHSA-2023:2459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41973","tags":["report"]},{"url":"https://bugzilla.redhat.com/2123894","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2459.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2948","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2948.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41973.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-41973","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0071.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31017","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/10/24/2","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APSADEAFW42LM3YIFLMFWKMKPGF667O4/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QIGZM5NOOMFDCITOLQEJNNX5SCRQLQVV/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7928","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5731-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2042","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2145225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166467","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2459.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41973","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2110485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166468","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2948.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1110","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1110.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223707-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187534","tags":["report"]},{"url":"https://bugzilla.suse.com/1202616","tags":["report"]},{"url":"https://bugzilla.suse.com/1202739","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41974","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223708-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223709-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1189551","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223710-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191900","tags":["report"]},{"url":"https://bugzilla.suse.com/1195506","tags":["report"]},{"url":"https://bugzilla.suse.com/1197570","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223711-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199342","tags":["report"]},{"url":"https://bugzilla.suse.com/1199345","tags":["report"]},{"url":"https://bugzilla.suse.com/1199346","tags":["report"]},{"url":"https://bugzilla.suse.com/1199347","tags":["report"]},{"url":"https://bugzilla.suse.com/1201483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41974","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-41973","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","status":"published","published":"2022-10-29T00:00:00Z","modified":"2024-08-03T12:56:39.104Z","updated_at":"2026-11-02T14:34:28.038197Z"}],"euvd":[{"id":"EUVD-2022-45077","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","status":"published","published":"2022-10-29T00:00:00Z","modified":"2024-08-03T12:56:39Z","updated_at":"2026-11-03T03:25:19.588915Z"}],"ghsa":[{"id":"GHSA-6c7c-85qv-wvgp","title":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as...","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","status":"published","published":"2022-10-29T19:00:27Z","modified":"2023-11-25T09:30:33Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:55:06.358976Z"}],"nvd":[{"id":"CVE-2022-41973","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","status":"published","published":"2022-10-29T18:15:12.993Z","modified":"2026-06-17T05:04:09.883Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:07:31.127985Z"}],"osv":[{"id":"AZL-11371","title":"CVE-2022-41973 affecting package device-mapper-multipath for versions less than 0.8.6-4","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","status":"published","published":"2022-10-29T18:15:12Z","modified":"2026-04-21T04:22:02.826344Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"DEBIAN-CVE-2022-41973","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","status":"published","published":"2022-10-29T18:15:12.993Z","modified":"2026-11-03T08:03:15.250601425Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"OESA-2022-2042","title":"multipath-tools security update","description":"This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically,monitors path devices for failure, removal, or addition, and applies the necessary changes to the multipath maps to ensure continuous availability of the map devices.\r\n\r\nSecurity Fix(es):\r\n\r\nmultipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.(CVE-2022-41973)","status":"published","published":"2022-11-04T11:05:21Z","modified":"2026-08-18T01:17:21.368197009Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:2459","title":"Red Hat Security Advisory: device-mapper-multipath security and bug fix update","status":"published","published":"2024-09-16T09:02:56Z","modified":"2026-06-26T12:22:11.017531123Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2948","title":"Red Hat Security Advisory: device-mapper-multipath security and bug fix update","status":"published","published":"2024-09-16T09:03:06Z","modified":"2026-06-26T12:22:20.48429495Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2024:1110","title":"Red Hat Security Advisory: device-mapper-multipath security update","status":"published","published":"2024-09-16T09:03:16Z","modified":"2026-06-26T12:22:36.729335899Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"UBUNTU-CVE-2022-41973","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","status":"published","published":"2022-10-24T15:00:00Z","modified":"2026-02-04T02:23:38.324698Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"ALSA-2023:2459","title":"Moderate: device-mapper-multipath security and bug fix update","description":"The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.\n\nSecurity Fix(es):\n\n* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:55.957671369Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2948","title":"Moderate: device-mapper-multipath security and bug fix update","description":"The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.\n\nSecurity Fix(es):\n\n* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:06.35361375Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CVE-2022-41973","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.","status":"published","published":"2022-10-29T00:00:00Z","modified":"2026-10-28T02:30:38.769127715Z","updated_at":"2026-11-02T15:44:27.186787Z"},{"id":"DLA-3250-1","title":"multipath-tools - security update","status":"published","published":"2022-12-29T00:00:00Z","modified":"2026-03-09T01:22:36.218948Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5366-1","title":"multipath-tools - security update","status":"published","published":"2023-03-01T00:00:00Z","modified":"2026-03-09T02:09:06.110867Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2024-0071","title":"Updated multipath-tools packages fix security vulnerabilities","description":"multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to\nobtain root access, as exploited in conjunction with CVE-2022-41974.\nLocal users able to access /dev/shm can change symlinks in multipathd\ndue to incorrect symlink handling, which could lead to controlled file\nwrites outside of the /dev/shm directory. This could be used indirectly\nfor local privilege escalation to root. (CVE-2022-41973)\nmultipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to\nobtain root access, as exploited alone or in conjunction with\nCVE-2022-41973. Local users able to write to UNIX domain sockets can\nbypass access controls and manipulate the multipath setup. This can lead\nto local privilege escalation to root. This occurs because an attacker\ncan repeat a keyword, which is mishandled because arithmetic ADD is used\ninstead of bitwise OR. (CVE-2022-41974)\n","status":"published","published":"2024-03-18T16:12:23Z","modified":"2026-04-16T04:43:25.03157452Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:12443-1","title":"kpartx-0.9.2+57+suse.cf3c1e9-1.1 on GA media","description":"These are all security issues fixed in the kpartx-0.9.2+57+suse.cf3c1e9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:42:04.926388Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:3707-1","title":"Security update for multipath-tools","description":"This update for multipath-tools fixes the following issues:\n\n- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)\n- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)\n- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)\n- Fix that some zfcp devices have large/negative LUN IDs (bsc#1187534)\n","status":"published","published":"2022-10-24T14:21:39Z","modified":"2026-02-04T03:50:34.305656Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3708-1","title":"Security update for multipath-tools","description":"This update for multipath-tools fixes the following issues:\n\n- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)\n- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)\n- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)\n- Fix that some zfcp devices have large/negative LUN IDs (bsc#1187534)\n","status":"published","published":"2022-10-24T14:22:13Z","modified":"2026-02-04T04:08:53.888453Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3709-1","title":"Security update for multipath-tools","description":"This update for multipath-tools fixes the following issues:\n\n- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)\n- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)\n- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)\n- multipathd: add 'force_reconfigure' option (bsc#1189551)\n  The command 'multipathd -kreconfigure' changes behavior: instead\n  of reloading every map, it checks map configuration and reloads\n  only modified maps. This speeds up the reconfigure operation \n  substantially. The old behavior can be reinstated by setting\n   'force_reconfigure yes' in multipath.conf (not recommended).\n   Note: 'force_reconfigure yes' is not supported in SLE15-SP4 and\n   beyond, which provide the command 'multipathd -k'reconfigure all''\n- multipathd: avoid stalled clients during reconfigure (bsc#1189551)\n- multipathd: handle client disconnect correctly (bsc#1189551)\n","status":"published","published":"2022-10-24T14:23:06Z","modified":"2026-02-04T02:21:37.428201Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3710-1","title":"Security update for multipath-tools","description":"This update for multipath-tools fixes the following issues:\n\n- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)\n- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)\n    \n- multipathd: add 'force_reconfigure' option (bsc#1189551)\n    The command 'multipathd -kreconfigure' changes behavior: instead\n    of reloading every map, it checks map configuration and reloads\n    only modified maps. This speeds up the reconfigure operation \n    substantially. The old behavior can be reinstated by setting\n    'force_reconfigure yes' in multipath.conf (not recommended).\n    Note: 'force_reconfigure yes' is not supported in SLE15-SP4 and\n    beyond, which provide the command 'multipathd -k'reconfigure all''\n\n- multipathd: avoid stalled clients during reconfigure (bsc#1189551)\n- multipathd: handle client disconnect correctly (bsc#1189551)\n- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)\n- multipathd: don't switch to DAEMON_IDLE during startup (bsc#1197570)\n- multipathd: disallow changing to/from fpin marginal paths on reconfig\n- multipathd handle fpin events (bsc#1195506,jsc#PED-1448)\n- multipath: fix exit status of multipath -T (bsc#1191900)\n","status":"published","published":"2022-10-24T14:23:32Z","modified":"2026-02-04T03:53:38.271868Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3711-1","title":"Security update for multipath-tools","description":"This update for multipath-tools fixes the following issues:\n\n- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)\n- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)\n- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)\n- libmultipath: fix find_multipaths_timeout for unknown hardware (bsc#1201483)\n- multipath-tools: fix 'multipath -ll' for Native NVME Multipath devices (bsc#1201483)\n- multipathd: don't switch to DAEMON_IDLE during startup (bsc#1199346, bsc#1197570)\n- multipathd: avoid delays during uevent processing (bsc#1199347)\n- multipathd: Don't keep starting TUR threads, if they always hang. (bsc#1199345)\n- Fix busy loop with delayed_reconfigure (bsc#1199342)\n- multipath.conf: add support for 'protocol' subsection in\n'overrides' section to set certain config options by protocol.\n- Removed the previously deprecated options getuid_callout, config_dir, multipath_dir, pg_timeout\n- Add disclaimer about vendor support\n- Change built-in defaults for NVMe: group by prio, and immediate failback\n- Fixes for minor issues reported by coverity\n- Fix for memory leak with uid_attrs\n- Updates for built in hardware db\n- Logging improvements\n- multipathd: use remove_map_callback for delayed reconfigure\n- Fix handling of path addition in read-only arrays on NVMe\n- Updates of built-in hardware database\n- libmultipath: only warn once about unsupported dev_loss_tmo\n","status":"published","published":"2022-10-24T14:23:58Z","modified":"2026-02-04T03:16:31.731778Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5731-1","title":"multipath-tools vulnerabilities","description":"It was discovered that multipath-tools incorrectly handled symlinks. A\nlocal attacker could possibly use this issue, in combination with other\nissues, to escalate privileges. This issue only affected Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-41973)\n\nIt was discovered that multipath-tools incorrectly handled access controls.\nA local attacker could possibly use this issue, in combination with other\nissues, to escalate privileges. (CVE-2022-41974)\n","status":"published","published":"2022-11-17T13:14:45Z","modified":"2026-02-10T04:42:50Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}