CVE-2022-3787: 
Rocky Linux vulnerability analysis and mitigation

A vulnerability (CVE-2022-3787) was identified in the device-mapper-multipath package that allows local users to obtain root access. This vulnerability represents a security regression of a previously fixed issue (CVE-2022-41974) in Red Hat Enterprise Linux. The issue was discovered when the fix for CVE-2022-41974 was not included in certain Red Hat Enterprise Linux updates, specifically versions 8.7 and 9.1 (Red Hat Bugzilla).

The vulnerability occurs due to mishandling of repeated keywords where arithmetic ADD operation is used instead of bitwise OR. Local users with the ability to write to UNIX domain sockets can exploit this to bypass access controls and manipulate the multipath setup (Red Hat CVE).

The vulnerability allows local users to bypass access controls and potentially escalate privileges to root. This can be exploited either alone or in conjunction with CVE-2022-41973, leading to unauthorized system access and control (Red Hat Bugzilla).

Red Hat has addressed this vulnerability through security updates RHSA-2022:7928 for Red Hat Enterprise Linux 8 and RHSA-2022:8453 for Red Hat Enterprise Linux 9 (Red Hat Bugzilla).