CVE Vulnerability

CVE-2022-2959

A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.

7 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.zerodayinitiative.com/advisories/ZDI-22-1165/ Third Party Advisory VDB Entry
https://github.com/torvalds/linux/commit/189b0ddc245139af81198d1a3637cac74f96e13a Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20230214-0005/
Configurations

Configuration 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Information

Published : 2022-08-25 06:15

Updated : 2023-02-14 01:15

NVD link : CVE-2022-2959

Mitre link : CVE-2022-2959

Products Affected
No products.
CWE
CWE-362

CWE-667