CVE-2022-2503
Linux Kernel LoadPin bypass via dm-verity table reload
- State
- Published
- Severity
- 6.9 Medium
- Published
- Aug 12, 2022
- Updated
- Oct 14, 2026
- Reserved
- Jul 21, 2022
Description
Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.9 Medium | CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N |
Weaknesses
- CWE-302 Authentication Bypass by Assumed-Immutable Data
Affected Products
| Product | Versions |
|---|---|
Linux KernelLinux Kernel |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.