Lucene search
HistoryJan 08, 2024 - 6:15 p.m.
CVE-2022-2585
posix cpu timers
use-after-free
vulnerability
thread
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.2%
It was discovered that when exec’ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
Affected configurations
Node
linuxlinux_kernelRange5.7–6.0
Node
canonicalubuntu_linuxMatch20.04lts
ORcanonicalubuntu_linuxMatch22.04lts
References
Related
nessus
nessus
RHEL 9 : kpatch-patch (RHSA-2022:7330)
2022-11-03 00:00:00
AlmaLinux 9 : kpatch-patch (ALSA-2022:7330)
2022-11-03 00:00:00
RHEL 9 : kernel (RHSA-2022:7318)
2022-11-03 00:00:00
redhatcve
redhatcve
CVE-2022-2585
2022-08-09 18:37:01
redhat
redhat
(RHSA-2022:7330) Important: kpatch-patch security update
2022-11-02 13:55:35
(RHSA-2022:7318) Important: kernel security, bug fix, and enhancement update
2022-11-02 13:52:07
(RHSA-2022:7319) Important: kernel-rt security and bug fix update
2022-11-02 13:52:24
cbl_mariner
cbl_mariner
CVE-2022-2585 affecting package kernel for versions less than 5.15.153.1-1
2024-04-09 20:48:36
debiancve
debiancve
CVE-2022-2585
2024-01-08 18:15:44
cve
cve
CVE-2022-2585
2024-01-08 18:15:44
prion
prion
Design/Logic Flaw
2024-01-08 18:15:00
cvelist
cvelist
CVE-2022-2585
2024-01-08 17:38:27
ubuntucve
ubuntucve
CVE-2022-2585
2022-08-09 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-11-02 00:00:00
Important: kernel-rt security and bug fix update
2022-11-02 00:00:00
osv
osv
Important: kernel-rt security and bug fix update
2022-11-02 00:00:00
Important: kernel-rt security and bug fix update
2022-11-02 13:52:24
Important: kernel security, bug fix, and enhancement update
2022-11-02 13:52:07
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2022-11-04 00:00:00
Unbreakable Enterprise kernel-container security update
2022-09-21 00:00:00
Unbreakable Enterprise kernel security update
2022-09-21 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2022-11-02 13:52:24
kernel security, bug fix, and enhancement update
2022-11-02 13:52:07
fedora
fedora
[SECURITY] Fedora 36 Update: kernel-5.18.17-200.fc36
2022-08-14 02:39:58
[SECURITY] Fedora 35 Update: kernel-5.18.17-100.fc35
2022-08-14 03:02:16
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2022-08-10 00:00:00
Linux kernel vulnerabilities
2022-08-10 00:00:00
Kernel Live Patch Security Notice
2022-08-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5567-1)
2022-08-26 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-9bbb1d9b7b)
2022-08-15 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-484e226872)
2022-08-15 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0226
2022-08-10 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0226
2022-08-10 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-08-12 00:00:00
Security update for the Linux Kernel (important)
2022-09-16 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-08-26 00:21:07
Updated kernel-linus packages fix security vulnerabilities
2022-08-26 00:21:07
redos
redos
ROS-20220908-01
2022-09-08 00:00:00
debian
debian
[SECURITY] [DLA 3102-1] linux-5.10 new package
2022-09-11 19:35:03
[SECURITY] [DSA 5207-1] linux security update
2022-08-15 19:52:20
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-08-26 04:17:47
ics
ics
Siemens SIMATIC S7-1500 TM MFP BIOS
2023-06-15 12:00:00
avleonov
avleonov
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.2%
Related for NVD:CVE-2022-2585