Vulnerability-Lookup

oesa-2022-1705

Vulnerability from osv_openeuler

Published

2022-06-10 11:04

Modified

2026-08-06 11:04

Summary

kernel security update

Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

There are use-after-free vulnerabilities in net/ax25/af_ax25.c of linux that allow attacker to crash linux kernel by simulating ax25 device from user space.(CVE-2022-1204)

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.(CVE-2022-30594)

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2022-1836)

With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.(CVE-2022-1789)

Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.(CVE-2021-33135)

perf: Fix sys_perf_event_open() race against self(CVE-2022-1729)

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-1204	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-30594	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-1836	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-1789	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2021-33135	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-1729	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "python2-perf-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "bpftool-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "perf-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-debugsource-4.19.90-2206.1.0.0153.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2206.1.0.0153.oe1.src.rpm"
        ],
        "x86_64": [
          "kernel-source-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "perf-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-devel-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "bpftool-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2206.1.0.0153.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2206.1.0.0153.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "python3-perf-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-debugsource-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "bpftool-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "perf-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2206.1.0.0153.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2206.1.0.0153.oe1.src.rpm"
        ],
        "x86_64": [
          "kernel-tools-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "bpftool-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "perf-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "kernel-devel-4.19.90-2206.1.0.0153.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2206.1.0.0153.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2206.1.0.0153.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "kernel-tools-debuginfo-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "python3-perf-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "perf-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "kernel-devel-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "bpftool-debuginfo-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "kernel-source-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "bpftool-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "python3-perf-debuginfo-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "kernel-debugsource-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "kernel-tools-devel-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "kernel-debuginfo-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "perf-debuginfo-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "kernel-headers-5.10.0-60.37.0.66.oe2203.aarch64.rpm",
          "kernel-tools-5.10.0-60.37.0.66.oe2203.aarch64.rpm"
        ],
        "src": [
          "kernel-5.10.0-60.37.0.66.oe2203.src.rpm"
        ],
        "x86_64": [
          "bpftool-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-tools-devel-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-headers-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-tools-debuginfo-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-source-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-debuginfo-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-debugsource-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "bpftool-debuginfo-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-tools-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "perf-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "python3-perf-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "python3-perf-debuginfo-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "perf-debuginfo-5.10.0-60.37.0.66.oe2203.x86_64.rpm",
          "kernel-devel-5.10.0-60.37.0.66.oe2203.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.10.0-60.37.0.66.oe2203"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nThere are use-after-free vulnerabilities in net/ax25/af_ax25.c of linux that allow attacker to crash linux kernel by simulating ax25 device from user space.(CVE-2022-1204)\r\n\r\nThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.(CVE-2022-30594)\n\n** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.(CVE-2022-1836)\n\nWith shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.(CVE-2022-1789)\n\nUncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.(CVE-2021-33135)\n\nperf: Fix sys_perf_event_open() race against self(CVE-2022-1729)",
  "id": "OESA-2022-1705",
  "modified": "2026-08-06T11:04:58Z",
  "published": "2022-06-10T11:04:58Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1705"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1204"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30594"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1836"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1789"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33135"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1729"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2022-1204",
    "CVE-2022-30594",
    "CVE-2022-1836",
    "CVE-2022-1789",
    "CVE-2021-33135",
    "CVE-2022-1729"
  ]
}

CVE-2021-33135 (GCVE-0-2021-33135)

Vulnerability from cvelistv5 – Published: 2022-05-12 16:35 – Updated: 2025-05-05 16:48

Summary

Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:20 UTC

CWE

denial of service
CWE-400 - Uncontrolled Resource Consumption

Assigner

intel mitre root

References

1 reference

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) SGX	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:42:19.991Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00603.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-33135",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:20:57.844666Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T16:48:09.235Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) SGX",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-12T16:35:46.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00603.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-33135",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) SGX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00603.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00603.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-33135",
    "datePublished": "2022-05-12T16:35:46.000Z",
    "dateReserved": "2021-05-18T00:00:00.000Z",
    "dateUpdated": "2025-05-05T16:48:09.235Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1204 (GCVE-0-2022-1204)

Vulnerability from cvelistv5 – Published: 2022-08-29 14:03 – Updated: 2024-08-02 23:55

Summary

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

Severity

No CVSS data available.

CWE

CWE-416 - - Use After Free.

Assigner

redhat redhat root

References

4 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2071051	x_refsource_MISC
https://www.openwall.com/lists/oss-security/2022/…	x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2…	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2022-1204	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Kernel	Affected: Not-Known.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:55:24.372Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2071051"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2022/04/02/2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2022-1204"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2022-1204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Not-Known."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free flaw was found in the Linux kernel\u2019s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 - Use After Free.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-29T14:03:07.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2071051"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2022/04/02/2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://security-tracker.debian.org/tracker/CVE-2022-1204"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2022-1204"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1204",
    "datePublished": "2022-08-29T14:03:07.000Z",
    "dateReserved": "2022-04-01T00:00:00.000Z",
    "dateUpdated": "2024-08-02T23:55:24.372Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1729 (GCVE-0-2022-1729)

Vulnerability from cvelistv5 – Published: 2022-09-01 00:00 – Updated: 2024-08-03 00:16

Summary

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Severity

No CVSS data available.

CWE

CWE-366

Assigner

redhat redhat root

References

3 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…
https://www.openwall.com/lists/oss-security/2022/…
https://security.netapp.com/advisory/ntap-2023021…

Impacted products

1 product

Vendor	Product	Version
n/a	linux kernel	Affected: linux kernel 5.18 rc9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:16:58.917Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2022/05/20/2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230214-0006/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "linux kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "linux kernel 5.18 rc9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-366",
              "description": "CWE-366",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-14T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2022/05/20/2"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230214-0006/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1729",
    "datePublished": "2022-09-01T00:00:00.000Z",
    "dateReserved": "2022-05-16T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:16:58.917Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1789 (GCVE-0-2022-1789)

Vulnerability from cvelistv5 – Published: 2022-05-31 18:48 – Updated: 2024-08-03 00:16

Summary

Severity

No CVSS data available.

CWE

CWE-476

Assigner

redhat redhat root

References

7 references

URL	Tags
https://francozappa.github.io/about-bias/	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1832397	x_refsource_MISC
https://kb.cert.org/vuls/id/647177/	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2022/dsa-5161	vendor-advisoryx_refsource_DEBIAN

Impacted products

1 product

Vendor	Product	Version
n/a	kernel	Affected: no patch information available yet

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:16:59.887Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://francozappa.github.io/about-bias/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832397"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://kb.cert.org/vuls/id/647177/"
          },
          {
            "name": "FEDORA-2022-ef8c8a5925",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBUOQTNTQ4ZCXHOCNKYIL2ZUIAZ675RD/"
          },
          {
            "name": "FEDORA-2022-be819b07a3",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KCEAPIVPRTJHKPF2A2HVF5XHD5XJT3MN/"
          },
          {
            "name": "FEDORA-2022-3b86247c11",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6JP355XFVAB33X4BNO3ERVTURFYEDB7/"
          },
          {
            "name": "DSA-5161",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5161"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "no patch information available yet"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-06-13T10:06:14.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://francozappa.github.io/about-bias/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832397"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://kb.cert.org/vuls/id/647177/"
        },
        {
          "name": "FEDORA-2022-ef8c8a5925",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBUOQTNTQ4ZCXHOCNKYIL2ZUIAZ675RD/"
        },
        {
          "name": "FEDORA-2022-be819b07a3",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KCEAPIVPRTJHKPF2A2HVF5XHD5XJT3MN/"
        },
        {
          "name": "FEDORA-2022-3b86247c11",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6JP355XFVAB33X4BNO3ERVTURFYEDB7/"
        },
        {
          "name": "DSA-5161",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5161"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-1789",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "no patch information available yet"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-476"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://francozappa.github.io/about-bias/",
              "refsource": "MISC",
              "url": "https://francozappa.github.io/about-bias/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1832397",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832397"
            },
            {
              "name": "https://kb.cert.org/vuls/id/647177/",
              "refsource": "MISC",
              "url": "https://kb.cert.org/vuls/id/647177/"
            },
            {
              "name": "FEDORA-2022-ef8c8a5925",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IBUOQTNTQ4ZCXHOCNKYIL2ZUIAZ675RD/"
            },
            {
              "name": "FEDORA-2022-be819b07a3",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KCEAPIVPRTJHKPF2A2HVF5XHD5XJT3MN/"
            },
            {
              "name": "FEDORA-2022-3b86247c11",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H6JP355XFVAB33X4BNO3ERVTURFYEDB7/"
            },
            {
              "name": "DSA-5161",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5161"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1789",
    "datePublished": "2022-05-31T18:48:00.000Z",
    "dateReserved": "2022-05-18T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:16:59.887Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1836 (GCVE-0-2022-1836)

Vulnerability from cvelistv5 – Published: 2022-06-19 21:21 – Updated: 2022-06-19 21:21

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2022-06-19T21:21:47.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1836",
    "datePublished": "2022-06-19T21:21:47.000Z",
    "dateRejected": "2022-06-19T21:21:47.000Z",
    "dateReserved": "2022-05-23T00:00:00.000Z",
    "dateUpdated": "2022-06-19T21:21:47.000Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}

CVE-2022-30594 (GCVE-0-2022-30594)

Vulnerability from cvelistv5 – Published: 2022-05-12 00:00 – Updated: 2024-08-03 06:56

Summary

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…
https://bugs.chromium.org/p/project-zero/issues/d…
https://github.com/torvalds/linux/commit/ee1fee90…
https://git.kernel.org/cgit/linux/kernel/git/torv…
http://packetstormsecurity.com/files/167386/Kerne…
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://www.debian.org/security/2022/dsa-5173	vendor-advisory
https://security.netapp.com/advisory/ntap-2022070…
http://packetstormsecurity.com/files/170362/Linux…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:56:13.169Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=2276"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ee1fee900537b5d9560e9f937402de5ddc8412f3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee1fee900537b5d9560e9f937402de5ddc8412f3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html"
          },
          {
            "name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
          },
          {
            "name": "DSA-5173",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5173"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220707-0001/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/170362/Linux-PT_SUSPEND_SECCOMP-Permission-Bypass-Ptracer-Death-Race.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-03T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2"
        },
        {
          "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=2276"
        },
        {
          "url": "https://github.com/torvalds/linux/commit/ee1fee900537b5d9560e9f937402de5ddc8412f3"
        },
        {
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee1fee900537b5d9560e9f937402de5ddc8412f3"
        },
        {
          "url": "http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html"
        },
        {
          "name": "[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
        },
        {
          "name": "DSA-5173",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5173"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20220707-0001/"
        },
        {
          "url": "http://packetstormsecurity.com/files/170362/Linux-PT_SUSPEND_SECCOMP-Permission-Bypass-Ptracer-Death-Race.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-30594",
    "datePublished": "2022-05-12T00:00:00.000Z",
    "dateReserved": "2022-05-12T00:00:00.000Z",
    "dateUpdated": "2024-08-03T06:56:13.169Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

oesa-2022-1705

Vulnerability from osv_openeuler

CVE-2021-33135 (GCVE-0-2021-33135)

CVE-2022-1204 (GCVE-0-2022-1204)

CVE-2022-1729 (GCVE-0-2022-1729)

CVE-2022-1789 (GCVE-0-2022-1789)

CVE-2022-1836 (GCVE-0-2022-1836)

CVE-2022-30594 (GCVE-0-2022-30594)

Tags

Sightings

Nomenclature

Related by attack behaviour