CVE-2022-2959

A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the...

AZL-10692 CVE-2022-2959 affecting package kernel for versions less than 5.15.67.1-4

A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the...

CVE-2022-2959

A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the...

UBUNTU-CVE-2022-2959

A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the...

CVE-2022-2959

A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the...

CVE-2022-2959

A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the...

CVE-2022-2959

A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the...

Linux Kernel Watch Queue Race Condition Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of pipe...

CVE-2022-2959

A race condition was found in the Linux kernel's watch queue due to a missing lock in the piperesizering. The race condition occurs when a thread uses ioctlIOCWATCHQUEUESETSIZE to resize the pipe buffer and free the old pipe buffer, while another thread uses keyctl to trigger a notification in th...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that stems from a lack of locks in its watch queue's piperesizering causing a contention condition. The flaw allows a loc...

GSD-2022-1002026 watch_queue: Free the page array when watch_queue is dismantled

watchqueue: Free the page array when watchqueue is dismantled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

PT-2022-30299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-30387

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-30028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.8...

PT-2022-29853

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.16.18 Description A NULL dereference issue exists in the error cleanup of the watch queue functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.16.18 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-29545

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.8 a...

PT-2022-29546

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.17.1 Description A NULL dereference issue exists in the error cleanup of the watch queue functionality. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-29704

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For...