CVE-2022-2503 - CVE House
Back to Database
Status published Medium CVE-2022-2503

Linux Kernel LoadPin bypass via dm-verity table reload

Vulnerability Description

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2503

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux Kernel

View All →
CVE-2022-2785
Arbitrary Memory read in BPF Linux Kernel
Medium 6.7
CVE-2022-2327
Use-after-free in io_uring ad work_flags in Linux Kernel
High 7.5
CVE-2021-23134
Linux kernel llcp_sock_bind/connect use-after-free
High 7.8
CVE-2021-23133
Linux Kernel sctp_destroy_sock race condition
Medium 6.7
CVE-2021-22600
Double Free in net/packet/af_packet.c leading to priviledge escalation
Medium 6.6

Affected Vendor

Linux Kernel

View all reports →

Affected Software

Linux Kernel
Vulnerable Versions:
unspecified

Timeline

Official Publish: August 12th, 2022
Last Modified: April 21st, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

Weaknesses (CWE)

CWE-302

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.