NetSight
IP …
medium5.3

CVE-2022-29526

golang.org/x/sys/unix has Incorrect privilege reporting in syscall

Impact

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Reporting in syscall. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible. ### Specific Go Packages Affected golang.org/x/sys/unix

Affected packages

EcosystemPackageAffectedFixed in
gogolang.org/x/sys< 0.0.0-20220412211240-33da011f77ad0.0.0-20220412211240-33da011f77ad

Affected products

VendorProductAffected versions
GolangGo
before 1.17.10
from 1.18.0 before 1.18.2
FedoraprojectFedora
Versions 35, 36
NetappBeegfs Csi Driver
All versions

Weakness classification

CWE-269

References