CVE-2022-1729

State: Published
Severity: Not scored
Published: Sep 1, 2022
Updated: Aug 3, 2024
Reserved: May 16, 2022

Description

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Scores

The record has no CVSS score.

Weaknesses

CWE-366

Affected Products

Product	Versions
linux kerneln/a	linux kernel 5.18 rc9Affected

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704
https://www.openwall.com/lists/oss-security/2022/05/20/2
https://security.netapp.com/advisory/ntap-20230214-0006/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.