CVE-2022-2959

2022-08-2500:00:00

CWE-667

redhat

www.cve.org

race condition

linux kernel

watch queue

privilege escalation

missing lock

pipe buffers

local user

system crash

system privilege

AI Score

7.2

Confidence

High

EPSS

Percentile

15.9%

JSON

A race condition was found in the Linux kernel’s watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "kernel",
    "versions": [
      {
        "version": "Fixed in kernel 5.19",
        "status": "affected"
      }
    ]
  }
]