CVE-2022-3787

CVE-2022-3787 is a local privilege escalation vulnerability affecting Red Hat's device-mapper-multipath, allowing local users to gain root access. The flaw stems from mishandling repeated keywords in UNIX domain socket input, where an arithmetic ADD is used instead of a bitwise OR, enabling attackers to bypass access controls. This vulnerability carries a high CVSS score of 7.8, indicating a low attack complexity and requiring local access, but leading to high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.