CVE-2022-2590

EPSS 0.9%CWE-362

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

31 ago 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system.

Produtos afetados

n/a · Linux kernel

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://lore.kernel.org/linux-mm/20220808073232.8808-1-david%40redhat.com/https://www.openwall.com/lists/oss-security/2022/08/08/1