2 lines
4.0 KiB
JSON
2 lines
4.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"kernel","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in kernel 5.19"}]}],"source":"secalert@redhat.com"},{"affectedData":[{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":"Siemens","versions":[{"lessThan":"V1.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"2E3E8401-3132-4A03-AB2A-C9BF29856AFA","versionEndExcluding":"5.10.120","versionStartIncluding":"5.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"08D699AD-F4CE-4BDD-A97E-4997299C7712","versionEndExcluding":"5.15.45","versionStartIncluding":"5.11","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"192FC54B-5367-49D6-B410-0285F14665B1","versionEndExcluding":"5.17.13","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"9FF255A1-64F4-4E31-AF44-C92FB8773BA2","versionEndExcluding":"5.18.2","versionStartIncluding":"5.18","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system."},{"lang":"es","value":"Se ha encontrado una condición de carrera en la cola de vigilancia del kernel de Linux debido a una falta de bloqueo en la función pipe_resize_ring(). El fallo específico se presenta en la administración de los búferes de las tuberías. El problema es debido a una falta de bloqueo apropiado cuando son realizadas operaciones sobre un objeto. Este fallo permite a un usuario local bloquear el sistema o escalar sus privilegios en el sistema."}],"id":"CVE-2022-2959","lastModified":"2026-10-14T14:17:22.303","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-08-25T18:15:10.303","references":[{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://github.com/torvalds/linux/commit/189b0ddc245139af81198d1a3637cac74f96e13a"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230214-0005/"},{"source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1165/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://github.com/torvalds/linux/commit/189b0ddc245139af81198d1a3637cac74f96e13a"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230214-0005/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1165/"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-667"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-362"},{"lang":"en","value":"CWE-667"}],"source":"nvd@nist.gov","type":"Primary"}]}
|