Wind River Support Network

HomeDefectsLINCD-9250
Fixed

LINCD-9250 : Security Advisory - linux - CVE-2022-30594

Created: May 12, 2022    Updated: May 25, 2022
Resolved Date: May 13, 2022
Found In Version: 10.20.6.0
Fix Version: 10.22.21.0
Severity: Standard
Applicable for: Wind River Linux CD
Component/s: Kernel

Description

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

CREATE(Triage):(User=admin) CVE-2022-30594 (https://nvd.nist.gov/vuln/detail/CVE-2022-30594)

CVEs


Live chat
Online