CVE-2022-29581

Advisory lineage Upstream: 0 Downstream: 45
Modified
Published: 17 May 2022, 16:50
Last modified:21 Apr 2025, 13:53

Vulnerability Summary

Overall Risk (default)
medium
41/100
CVSS Score
7.8 HIGH
v3.1 (cve.org)
EPSS Score
0.18% LOW
0% probability -0.10%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

17 May 2022, 16:50
Published
Vulnerability first disclosed
21 Apr 2025, 13:53
Last Modified
Vulnerability information updated

Description

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.18%• Percentile: 40%

Techniques & Countermeasures

  • CWE-911•Improper Update of Reference Count

    The product uses a reference count to manage a resource, but it does not update or incorrectly updates the reference count.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04 | 20.04 | 22.04

  • debian•debian_linux

    10.0

  • Unknown•Kernel

    ≥ unspecified, < 5.18 | ≥ 4.14, < unspecified

  • linux•linux_kernel

    ≥ 4.14, < 4.14.278 | ≥ 4.15, < 4.19.241 | ≥ 4.20, < 5.4.191 | ≥ 5.5, < 5.10.113 | ≥ 5.11, < 5.15.36 | ≥ 5.16, < 5.17.5

  • netapp•h300e

    na

  • netapp•h300s_firmware

    na

  • netapp•h410c_firmware

    na

  • netapp•h410s_firmware

    na

  • netapp•h500e

    na

  • netapp•h500s_firmware

    na

  • netapp•h700e

    na

  • netapp•h700s_firmware

    na

References (7)