CVE-2022-30688: Debian Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Needrestart Project Needrestart: from 0.8, before 3.6 (fixed in 3.6)

Published 2022-05-17. Last modified 2026-06-17.