Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-74088
HistoryOct 17, 2022 - 12:00 a.m.

Linux Kernel Competition Condition Issue Vulnerability (CNVD-2022-74088)

2022-10-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Linux Kernel is the kernel used by the Linux Foundation’s open source operating system, Linux. Linux Kernel is vulnerable to a contention condition issue. The vulnerability stems from a copy-on-write (COW) corruption in the memory subsystem’s handling of private read-only shared memory maps. A local attacker could exploit the vulnerability to gain write access to the read-only memory map, which in turn increases its privileges on the system.

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H