Race Condition Vulnerability in Network Dispatcher by Linux Vendor

CVE-2022-29800

Summary

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was identified in networkd-dispatcher, a component of Linux systems. This vulnerability arises from the interval between script discovery and execution, allowing an attacker to substitute malicious scripts for legitimate ones recognized by networkd-dispatcher as owned by root. Consequently, this flaw can lead to unauthorized script execution and potentially escalate privileges. Users of the affected product are urged to apply available patches and updates to mitigate the risk.

References