imPC@ndo IT

Tracker / CVE-2022-30594

CVE-2022-30594

High 7.8

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

Affected products and versions

debian debian_linux
linux linux_kernel · … → 4.19.238
linux linux_kernel · 4.20 → 5.4.189
linux linux_kernel · 5.11 → 5.15.33
linux linux_kernel · 5.16.0 → 5.16.19
linux linux_kernel · 5.17 → 5.17.2
linux linux_kernel · 5.5.0 → 5.10.110
netapp 8300_firmware
netapp 8700_firmware
netapp a400_firmware
netapp h300s_firmware
netapp h410c_firmware
netapp h410s_firmware
netapp h500s_firmware
netapp h700s_firmware
netapp hci_compute_node
netapp solidfire\,_enterprise_sds_\&_hci_storage_node
netapp solidfire_\&_hci_management_node

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References