Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-1729

Date: August 31, 2022

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Severity Score

Related Resources (8)

https://nvd.nist.gov/vuln/detail/CVE-2022-1729
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704
https://people.canonical.com/~ubuntu-security/cve/CVE-2022-1729
https://www.openwall.com/lists/oss-security/2022/05/20/2
https://security.netapp.com/advisory/ntap-20230214-0006/
https://access.redhat.com/security/cve/CVE-2022-1729
https://security-tracker.debian.org/tracker/CVE-2022-1729
https://www.mend.io/vulnerability-database/CVE-2022-1729

Severity Score

Weakness Type (CWE)

Race Conditions

CWE-362

Race Condition within a Thread

CWE-366

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us