CVE-2022-1729: Linux Kernel

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Affected products

• Linux Linux Kernel: from 3.2.85, before 3.3 (fixed in 3.3); from 3.16.40, before 3.17 (fixed in 3.17); from 3.18.54, before 3.19 (fixed in 3.19); from 4.0.0, before 4.9.316 (fixed in 4.9.316); from 4.10, before 4.14.281 (fixed in 4.14.281); from 4.15, before 4.19.245 (fixed in 4.19.245); …
• Netapp Hci Baseboard Management Controller: version h300s only; version h410s only; version h500s only; version h700s only

Published 2022-09-01. Last modified 2026-06-17.