CVEvulnerability

CVE-2022-1729

7.0 HIGH Published 2022-09-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-362, CWE-366

Description

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Affected configurations

• linux linux kernel (>= 3.2.85 < 3.3) • linux linux kernel (>= 3.16.40 < 3.17) • linux linux kernel (>= 3.18.54 < 3.19) • linux linux kernel (>= 4.0.0 < 4.9.316) • linux linux kernel (>= 4.10 < 4.14.281) • linux linux kernel (>= 4.15 < 4.19.245) • linux linux kernel (>= 4.20 < 5.4.196) • linux linux kernel (>= 5.5.0 < 5.10.118) • linux linux kernel (>= 5.11 < 5.15.42) • linux linux kernel (>= 5.16 < 5.17.10) • netapp hci baseboard management controller h300s • netapp hci baseboard management controller h410s • netapp hci baseboard management controller h500s • netapp hci baseboard management controller h700s

Related

Weakness · CWE (2)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-366 Race Condition within a Thread weakness

References