CVE-2022-1729
HIGHCVSS 7/10EPSS 0.31%
Last modified
CVE-2022-1729 is a high-severity vulnerability rated 7/10 on the CVSS scale. A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 3.2.85, < 3.3 |
| Linux | Linux Kernel | >= 3.16.40, < 3.17 |
| Linux | Linux Kernel | >= 3.18.54, < 3.19 |
| Linux | Linux Kernel | >= 4.0.0, < 4.9.316 |
| Linux | Linux Kernel | >= 4.10, < 4.14.281 |
| Linux | Linux Kernel | >= 4.15, < 4.19.245 |
| Linux | Linux Kernel | >= 4.20, < 5.4.196 |
| Linux | Linux Kernel | >= 5.5.0, < 5.10.118 |
| Linux | Linux Kernel | >= 5.11, < 5.15.42 |
| Linux | Linux Kernel | >= 5.16, < 5.17.10 |
| Netapp | Hci Baseboard Management Controller | h300s |
| Netapp | Hci Baseboard Management Controller | h410s |
| Netapp | Hci Baseboard Management Controller | h500s |
| Netapp | Hci Baseboard Management Controller | h700s |
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704Mailing List, Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20230214-0006/Patch, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/05/20/2Mailing List, Patch, Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704Mailing List, Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20230214-0006/Patch, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/05/20/2Mailing List, Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-1729?
A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.
How severe is CVE-2022-1729?
CVE-2022-1729 has a CVSS score of 7/10 (HIGH severity). The EPSS model estimates a 0.31% probability of exploitation in the next 30 days.
How do I fix CVE-2022-1729?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-1723Server-Side Request Forgery (SSRF) in GitHub repository jgra…7.5
- CVE-2022-1724The Simple Membership WordPress plugin before 4.1.1 does not…6.1
- CVE-2022-1725NULL Pointer Dereference in GitHub repository vim/vim prior …5.5
- CVE-2022-1726Bootstrap Tables XSS vulnerability with Table Export plug-in…5.4
- CVE-2022-1727Improper Input Validation in GitHub repository jgraph/drawio…8.8
- CVE-2022-1728Allowing long password leads to denial of service in polonel…6.5
- CVE-2022-1730Cross-site Scripting (XSS) - Stored in GitHub repository jgr…4.6
- CVE-2022-1731Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vul…9.8
- CVE-2022-1732The Rename wp-login.php WordPress plugin through 2.6.0 does …6.5
- CVE-2022-1733Heap-based Buffer Overflow in GitHub repository vim/vim prio…7.8
- CVE-2022-1734A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev()…7
- CVE-2022-1735Classic Buffer Overflow in GitHub repository vim/vim prior t…7.8
Are you affected by CVE-2022-1729?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST