HomeDefectsLIN1022-108
Fixed

LIN1022-108 : Security Advisory - git - CVE-2022-24765

Created: Apr 28, 2022    Updated: Jan 26, 2026
Resolved Date: Jul 25, 2022
Found In Version: 10.22.33.1
Fix Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

On multi-user machines, Git users might find themselves unexpectedly in  a Git worktree, e.g. when there is a scratch space (`/scratch/`) intended  for all users and another user created a repository in /scratch/.git`.
  Merely having a Git-aware prompt that runs `git status` (or `git diff`)  and navigating to a directory which is supposedly not a Git worktree, or  opening such a directory in an editor or IDE such as VS Code or Atom, will  potentially run commands defined by that other user via  `/scratch/.git/config`.