Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-22942HistoryDec 13, 2023 - 9:15 a.m.
CVE-2022-22942
2023-12-1309:15:33
Debian Security Bug Tracker
security-tracker.debian.org
86
cve-2022-22942
unprivileged users
system files
'file' pointer
unix
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
31.3%
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling ‘file’ pointer.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | <Â 5.15.15-2 | linux_5.15.15-2_all.deb |
| Debian | 11 | all | linux | <Â 5.10.92-2 | linux_5.10.92-2_all.deb |
| Debian | 999 | all | linux | <Â 5.15.15-2 | linux_5.15.15-2_all.deb |
| Debian | 13 | all | linux | <Â 5.15.15-2 | linux_5.15.15-2_all.deb |
Related
packetstorm
packetstorm
vmwgfx Driver File Descriptor Handling Privilege Escalation
2023-02-01 00:00:00
ibm
ibm
prion
prion
Privilege escalation
2023-12-13 09:15:00
zdt
zdt
vmwgfx Driver File Descriptor Handling Privilege Escalation Exploit
2023-02-01 00:00:00
cve
cve
CVE-2022-22942
2023-12-13 09:15:33
metasploit
metasploit
vmwgfx Driver File Descriptor Handling Priv Esc
2023-01-17 20:30:36
nvd
nvd
CVE-2022-22942
2023-12-13 09:15:33
veracode
veracode
Use After Free
2022-02-22 17:27:51
ubuntucve
ubuntucve
CVE-2022-22942
2022-01-28 00:00:00
redhatcve
redhatcve
CVE-2022-22942
2022-01-28 07:41:45
cvelist
cvelist
CVE-2022-22942
2023-12-13 08:16:34
nessus
nessus
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2022-02-01 18:26:02
Updated kernel packages fix security vulnerabilities
2022-02-01 18:26:02
f5
f5
K30914425 : Linux vulnerabilities CVE-2022-0330 and CVE-2022-22942
2022-04-19 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0042)
2022-02-09 00:00:00
Mageia: Security Advisory (MGASA-2022-0041)
2022-02-09 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1537)
2022-04-25 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0148
2022-01-26 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0148
2022-01-28 00:00:00
Critical Photon OS Security Update - PHSA-2022-0356
2022-01-26 00:00:00
virtuozzo
virtuozzo
redhat
redhat
(RHSA-2022:1107) Important: kernel security update
2022-03-29 08:25:59
(RHSA-2022:0925) Important: kpatch-patch security update
2022-03-15 12:48:47
(RHSA-2022:1103) Important: kpatch-patch security update
2022-03-29 08:17:08
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-02-03 19:21:26
ubuntu
ubuntu
Linux kernel (HWE) vulnerabilities
2022-02-18 00:00:00
Linux kernel vulnerabilities
2022-02-22 00:00:00
Linux kernel (GKE) vulnerabilities
2022-02-22 00:00:00
osv
osv
linux, linux-aws, linux-aws-5.13, linux-azure, linux-gcp, linux-kvm, linux-oracle, linux-oracle-5.13, linux-raspi vulnerabilities
2022-02-22 07:14:53
linux-hwe-5.13 vulnerabilities
2022-02-18 00:41:45
Important: kernel-rt security and bug fix update
2022-03-10 14:37:54
rocky
rocky
kernel-rt security and bug fix update
2022-03-10 14:37:54
kernel security, bug fix, and enhancement update
2022-03-10 14:43:03
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-03-10 14:43:03
cloudfoundry
cloudfoundry
USN-5294-2: Linux kernel vulnerabilities | Cloud Foundry
2022-03-11 00:00:00
USN-5298-1: Linux kernel vulnerabilities | Cloud Foundry
2022-04-21 00:00:00
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2022-03-11 00:00:00
kernel security and bug fix update
2022-02-23 00:00:00
Unbreakable Enterprise kernel-container security update
2022-04-11 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2022-02-25 15:41:18
debian
debian
[SECURITY] [DSA 5092-1] linux security update
2022-03-07 12:54:12
[SECURITY] [DLA 2941-1] linux-4.19 security update
2022-03-09 12:40:55
[SECURITY] [DSA 5096-1] linux security update
2022-03-09 15:30:58
suse
suse
Security update for the Linux Kernel (critical)
2022-02-11 00:00:00
Security update for the Linux Kernel (critical)
2022-02-10 00:00:00
Security update for the Linux Kernel (important)
2022-06-17 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
31.3%
Related for DEBIANCVE:CVE-2022-22942