CVE-2022-21499

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

• CWE-787

• http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.htmlThird Party Advisory, VDB Entry
• https://git.kernel.org/linus/eadb2f47a3ced5c64b23b90fd2a3463f63726066Mailing List, Patch, Vendor Advisory
• https://www.debian.org/security/2022/dsa-5161Third Party Advisory
• http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.htmlThird Party Advisory, VDB Entry
• https://git.kernel.org/linus/eadb2f47a3ced5c64b23b90fd2a3463f63726066Mailing List, Patch, Vendor Advisory
• https://www.debian.org/security/2022/dsa-5161Third Party Advisory

Published

Jun 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21492Vulnerability in the Oracle Business Intelligence Enterprise…6.1
• CVE-2022-21493Vulnerability in the Oracle Solaris product of Oracle System…5.9
• CVE-2022-21494Vulnerability in the Oracle Solaris product of Oracle System…4
• CVE-2022-21496Vulnerability in the Oracle Java SE, Oracle GraalVM Enterpri…5.3
• CVE-2022-21497Vulnerability in the Oracle Web Services Manager product of …8.1
• CVE-2022-21498Vulnerability in the Java VM component of Oracle Database Se…6.5
• CVE-2022-21500Vulnerability in Oracle E-Business Suite (component: Manage …7.5
• CVE-2022-21503Vulnerability in the Oracle Cloud Infrastructure product of …4.9
• CVE-2022-21504The code in UEK6 U3 was missing an appropiate file descripto…5.5
• CVE-2022-21505In the linux kernel, if IMA appraisal is used with the "ima_…6.7
• CVE-2022-21508Vulnerability in Oracle Essbase (component: Security and Pro…5.8
• CVE-2022-21509Vulnerability in the MySQL Server product of Oracle MySQL (c…5.5