CVE-2022-2977: 
Linux Kernel vulnerability analysis and mitigation

A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default), a local attacker can create a use-after-free condition that may enable privilege escalation on the system. The vulnerability was discovered and disclosed in August 2022, affecting Linux kernel versions prior to 5.18 (CVE Mitre).

The vulnerability has been assigned a CVSS v3.1 score of 7.8 (HIGH) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The issue specifically affects systems where virtualized TPM devices are configured, which is not the default configuration. The vulnerability exists in the kernel's implementation of proxied virtualized TPM devices and manifests as a use-after-free condition (NetApp Security).

The successful exploitation of this vulnerability could lead to privilege escalation, allowing an attacker to gain elevated access to the system. The impact includes potential disclosure of sensitive information, addition or modification of data, and possible Denial of Service (DoS) conditions (NetApp Security).

The vulnerability requires local access to the system and can only be exploited on systems where virtualized TPM devices are configured. The attack complexity is considered low, requiring low privileges and no user interaction for successful exploitation (NetApp Security).

The vulnerability was addressed in Linux kernel version 5.18 and subsequent versions. A fix was also backported to various stable kernel branches. The fix can be found in the Linux kernel repository through commit 9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f (Kernel Commit).