CVE-2022-1729

CVSS V2 None CVSS V3 High 7

Description

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Overview

CVE ID
CVE-2022-1729

Assigner
secalert@redhat.com

Vulnerability Status
Modified

Published Version
2022-09-01T21:15:09

Last Modified Date
2023-02-14T13:15:10

Weakness Enumerations

CWE	URL
CWE-362	http://cwe.mitre.org/data/definitions/362.html
CWE-366	http://cwe.mitre.org/data/definitions/366.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:o:linux:linux_kernel:5.18:rc9::::::	1	OR

CVSS Version 3

Version
3.1

Vector String
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL

Attack Compatibility
HIGH

Privileges Required
LOW

User Interaction
NONE

Scope
UNCHANGED

Confidentiality Impact
HIGH

Availability Impact
HIGH

Base Score
7

Base Severity
HIGH

Exploitability Score
1

Impact Score
5.9

References

Reference URL	Reference Tags
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704	Mailing List Patch Vendor Advisory
https://security.netapp.com/advisory/ntap-20230214-0006/
https://www.openwall.com/lists/oss-security/2022/05/20/2	Mailing List Patch Third Party Advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-1729
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1729

History

Created	Old Value	New Value	Data Type	Notes
2022-09-01 22:00:08				Added to TrackCVE
2023-02-14 14:13:52		2023-02-14T13:15:10	CVE Modified Date	updated
2023-02-14 14:13:52	Analyzed	Modified	Vulnerability Status	updated
2023-02-14 14:13:53			Weakness Enumeration	update
2023-02-14 14:13:55			References	updated