CVE-2022-21499: Debian Linux

Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days.

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Affected products

• Debian Debian Linux: version 11.0 only
• Oracle Linux: version 6 only; version 7 only; version 8 only

Published 2022-06-09. Last modified 2026-06-17.