Riskcovery

CVE-2022-21499

State
Published
Severity
6.7 Medium
Published
Jun 9, 2022
Updated
Sep 24, 2024
Reserved
Nov 15, 2021

Read the record on cve.org

Description

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Scores

CVSSScoreVectorSource
3.16.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Horacle

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Oracle LinuxOracle Corporation
  • Oracle Linux: 6Affected
  • Oracle Linux: 7Affected
  • Oracle Linux: 8Affected
Oracle VMOracle Corporation
  • Oracle VM: 3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.