NetSight
high7.8

CVE-2022-29581

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root.

Impact

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.14 before 4.14.278
from 4.15 before 4.19.241
from 4.20 before 5.4.191
from 5.5 before 5.10.113
from 5.11 before 5.15.36
from 5.16 before 5.17.5
DebianDebian Linux
Version 10.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04, 22.04
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions

Weakness classification

References