CVE Vulnerability

CVE-2022-1729

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

7 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.openwall.com/lists/oss-security/2022/05/20/2 Mailing List Patch
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704 Mailing List Patch
https://security.netapp.com/advisory/ntap-20230214-0006/
Configurations

Configuration 1

cpe:2.3:o:linux:linux_kernel:5.18:rc9:*:*:*:*:*:*
Information

Published : 2022-09-01 09:15

Updated : 2023-02-14 01:15

NVD link : CVE-2022-1729

Mitre link : CVE-2022-1729

Products Affected

Linux

Linux Kernel

CWE
CWE-362