NetSight
IP …
high7.8

CVE-2022-30594

The Linux kernel before 5.17.2 mishandles seccomp permissions.

Impact

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.238
from 4.20 before 5.4.189
from 5.5.0 before 5.10.110
from 5.11 before 5.15.33
from 5.16.0 before 5.16.19
from 5.17 before 5.17.2
DebianDebian Linux
Versions 9.0, 10.0
NetappSolidfire\, Enterprise Sds \& Hci Storage Node
All versions
NetappSolidfire \& Hci Management Node
All versions
NetappHci Compute Node
All versions
Netapp8300 Firmware
All versions
Netapp8700 Firmware
All versions
NetappA400 Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH410s Firmware
All versions

Weakness classification

CWE-862

References