How severe is CVE-2022-1729?

CVE-2022-1729 has a CVSS v3 score of 7 (HIGH).

CVE-2022-1729

Name: linux_kernel
Author: linux

7.0HIGH

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kern

Veröffentlicht: 9/1/2022Aktualisiert: 11/21/2024

Beschreibung

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

KI-AnalyseKI-gestützt

Betroffene Produkte

linuxlinux_kernel

netapphci_baseboard_management_controller

h300s

netapphci_baseboard_management_controller

h410s

netapphci_baseboard_management_controller

h500s

netapphci_baseboard_management_controller

h700s

Referenzen

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704
Mailing ListPatchVendor Advisory
https://security.netapp.com/advisory/ntap-20230214-0006/
PatchThird Party Advisory
https://www.openwall.com/lists/oss-security/2022/05/20/2
Mailing ListPatchThird Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704
Mailing ListPatchVendor Advisory
https://security.netapp.com/advisory/ntap-20230214-0006/
PatchThird Party Advisory
https://www.openwall.com/lists/oss-security/2022/05/20/2
Mailing ListPatchThird Party Advisory