Read the docs
TI-2022-01595 Aliases CVE-2022-1729

Race condition in linux kernel

Priority LOW 31CWE-366Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Why it matters now

EPSS 0.00331 26th percentileScored 2026-11-07
Fix Fixed Red Hat: 15 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—linux kernellinux kernel 5.18 rc9—No fix listedCNA
  • linux kernel Vendor— Affected linux kernel 5.18 rc9 Fixed in — No fix listed CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*3.2.85 to before 3.3; 3.16.40 to before 3.17; 3.18.54 to before 3.19; 4.0.0 to before 4.9.316; 4.10 to before 4.14.281; 4.15 to before 4.19.245; 4.20 to before 5.4.196; 5.5.0 to before 5.10.118; 5.11 to before 5.15.42; 5.16 to before 5.17.10VulnerableLinux
cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*h300sVulnerableNetApp
cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*h410sVulnerableNetApp
cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*h500sVulnerableNetApp
cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*h700sVulnerableNetApp
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 3.2.85 to before 3.3; 3.16.40 to before 3.17; 3.18.54 to before 3.19; 4.0.0 to before 4.9.316; 4.10 to before 4.14.281; 4.15 to before 4.19.245; 4.20 to before 5.4.196; 5.5.0 to before 5.10.118; 5.11 to before 5.15.42; 5.16 to before 5.17.10 Vulnerable ·Linux
  • cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:* Versions h300s Vulnerable ·NetApp
  • cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:* Versions h410s Vulnerable ·NetApp
  • cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:* Versions h500s Vulnerable ·NetApp
  • cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:* Versions h700s Vulnerable ·NetApp

Remediation

Red Hat 15 advisories

  • RHSA-2022:6741 Released 2022-09-28 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.70.1.el7, kernel-3.10.0-1062.70.1.el7, kernel-abi-whitelists-3.10.0-1062.70.1.el7 +8
    • Red Hat Enterprise Linux Server E4S (v. 7.7) bpftool-3.10.0-1062.70.1.el7, kernel-3.10.0-1062.70.1.el7, kernel-abi-whitelists-3.10.0-1062.70.1.el7 +9
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.70.1.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.7) kernel-debug-devel-3.10.0-1062.70.1.el7, kernel-tools-libs-devel-3.10.0-1062.70.1.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.70.1.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.7) bpftool-3.10.0-1062.70.1.el7, kernel-3.10.0-1062.70.1.el7, kernel-abi-whitelists-3.10.0-1062.70.1.el7 +8
  • RHSA-2022:6432 Released 2022-09-13 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.6) bpftool-3.10.0-957.97.1.el7, kernel-3.10.0-957.97.1.el7, kernel-abi-whitelists-3.10.0-957.97.1.el7 +8
    • Red Hat Enterprise Linux Server E4S (v. 7.6) kernel-3.10.0-957.97.1.el7, kernel-abi-whitelists-3.10.0-957.97.1.el7, kernel-bootwrapper-3.10.0-957.97.1.el7 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.97.1.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.6) kernel-debug-devel-3.10.0-957.97.1.el7, kernel-tools-libs-devel-3.10.0-957.97.1.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.97.1.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.6) bpftool-3.10.0-957.97.1.el7, kernel-3.10.0-957.97.1.el7, kernel-abi-whitelists-3.10.0-957.97.1.el7 +8
  • RHSA-2022:5806 Released 2022-08-02 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) kernel-3.10.0-514.104.1.el7, kernel-abi-whitelists-3.10.0-514.104.1.el7, kernel-debug-3.10.0-514.104.1.el7 +7
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.104.1.el7
Show 12 more Red Hat advisories
  • RHSA-2022:5626 Released 2022-07-19 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux BaseOS EUS (v.8.4) bpftool-4.18.0-305.57.1.el8_4, kernel-4.18.0-305.57.1.el8_4, kernel-abi-stablelists-4.18.0-305.57.1.el8_4 +19
    • Red Hat Enterprise Linux CRB EUS (v.8.4) kernel-tools-libs-devel-4.18.0-305.57.1.el8_4
  • RHSA-2022:5633 Released 2022-07-19 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux NFV EUS (v.8.4) kernel-rt-4.18.0-305.57.1.rt7.129.el8_4, kernel-rt-core-4.18.0-305.57.1.rt7.129.el8_4, kernel-rt-debug-4.18.0-305.57.1.rt7.129.el8_4 +9
    • Red Hat Enterprise Linux RT EUS (v.8.4) kernel-rt-4.18.0-305.57.1.rt7.129.el8_4, kernel-rt-core-4.18.0-305.57.1.rt7.129.el8_4, kernel-rt-debug-4.18.0-305.57.1.rt7.129.el8_4 +7
  • RHSA-2022:5636 Released 2022-07-19 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.1) bpftool-4.18.0-147.70.1.el8_1, kernel-4.18.0-147.70.1.el8_1, kernel-abi-whitelists-4.18.0-147.70.1.el8_1 +14
  • RHSA-2022:5564 Released 2022-07-13 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-372.16.1.el8_6, kernel-4.18.0-372.16.1.el8_6, kernel-abi-stablelists-4.18.0-372.16.1.el8_6 +19
    • Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-372.16.1.el8_6
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.16.1.el8_6, perf-4.18.0-372.16.1.el8_6
  • RHSA-2022:5565 Released 2022-07-13 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-372.16.1.rt7.173.el8_6, kernel-rt-core-4.18.0-372.16.1.rt7.173.el8_6, kernel-rt-debug-4.18.0-372.16.1.rt7.173.el8_6 +9
    • Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-372.16.1.rt7.173.el8_6, kernel-rt-core-4.18.0-372.16.1.rt7.173.el8_6, kernel-rt-debug-4.18.0-372.16.1.rt7.173.el8_6 +7
  • RHSA-2022:5249 Released 2022-07-01 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-70.17.1.el9_0
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-debug-devel-5.14.0-70.17.1.el9_0, kernel-debug-devel-matched-5.14.0-70.17.1.el9_0, kernel-devel-5.14.0-70.17.1.el9_0 +5
    • Red Hat Enterprise Linux BaseOS (v. 9) bpftool-5.14.0-70.17.1.el9_0, kernel-5.14.0-70.17.1.el9_0, kernel-abi-stablelists-5.14.0-70.17.1.el9_0 +14
  • RHSA-2022:5232 Released 2022-06-28 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1160.71.1.el7, kernel-3.10.0-1160.71.1.el7, kernel-abi-whitelists-3.10.0-1160.71.1.el7 +8
    • Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.71.1.el7
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.71.1.el7
    • Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1160.71.1.el7, kernel-3.10.0-1160.71.1.el7, kernel-abi-whitelists-3.10.0-1160.71.1.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1160.71.1.el7, kernel-tools-libs-devel-3.10.0-1160.71.1.el7
    • Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1160.71.1.el7, kernel-3.10.0-1160.71.1.el7, kernel-abi-whitelists-3.10.0-1160.71.1.el7 +8
    • Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1160.71.1.el7
  • RHSA-2022:5220 Released 2022-06-28 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder EUS (v. 8.2) kernel-tools-libs-devel-4.18.0-193.87.1.el8_2
    • Red Hat Enterprise Linux BaseOS EUS (v. 8.2) bpftool-4.18.0-193.87.1.el8_2, kernel-4.18.0-193.87.1.el8_2, kernel-abi-whitelists-4.18.0-193.87.1.el8_2 +19
  • RHSA-2022:5267 Released 2022-06-28 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-70.17.1.rt21.89.el9_0, kernel-rt-core-5.14.0-70.17.1.rt21.89.el9_0, kernel-rt-debug-5.14.0-70.17.1.rt21.89.el9_0 +7
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-70.17.1.rt21.89.el9_0, kernel-rt-core-5.14.0-70.17.1.rt21.89.el9_0, kernel-rt-debug-5.14.0-70.17.1.rt21.89.el9_0 +9
  • RHSA-2022:5236 Released 2022-06-28 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-1160.71.1.rt56.1212.el7, kernel-rt-debug-3.10.0-1160.71.1.rt56.1212.el7, kernel-rt-debug-devel-3.10.0-1160.71.1.rt56.1212.el7 +4
    • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1160.71.1.rt56.1212.el7, kernel-rt-debug-3.10.0-1160.71.1.rt56.1212.el7, kernel-rt-debug-devel-3.10.0-1160.71.1.rt56.1212.el7 +7
  • RHSA-2022:5224 Released 2022-06-28 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time EUS (v. 8.2) kernel-rt-4.18.0-193.87.1.rt13.137.el8_2, kernel-rt-core-4.18.0-193.87.1.rt13.137.el8_2, kernel-rt-debug-4.18.0-193.87.1.rt13.137.el8_2 +7
    • Red Hat Enterprise Linux Real Time for NFV EUS (v. 8.2) kernel-rt-4.18.0-193.87.1.rt13.137.el8_2, kernel-rt-core-4.18.0-193.87.1.rt13.137.el8_2, kernel-rt-debug-4.18.0-193.87.1.rt13.137.el8_2 +9
  • RHSA-2022:5157 Released 2022-06-22 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.103.1.el7, kernel-abi-whitelists-3.10.0-693.103.1.el7, kernel-debug-3.10.0-693.103.1.el7 +7
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.103.1.el7

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2022:5249
Red Hat CodeReady Linux Builder EUS (v. 8.2)Fixed RHSA-2022:5220
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2022:5249
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2022:5564
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2022:5249
Red Hat Enterprise Linux BaseOS E4S (v. 8.1)Fixed RHSA-2022:5636
Red Hat Enterprise Linux BaseOS EUS (v. 8.2)Fixed RHSA-2022:5220
Red Hat Enterprise Linux BaseOS EUS (v.8.4)Fixed RHSA-2022:5626
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2022:5564
Red Hat Enterprise Linux CRB EUS (v.8.4)Fixed RHSA-2022:5626
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2022:5232
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2022:5232
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2022:5232
Red Hat Enterprise Linux NFV (v. 8)Fixed RHSA-2022:5565
Red Hat Enterprise Linux NFV EUS (v.8.4)Fixed RHSA-2022:5633
Red Hat Enterprise Linux RT (v. 8)Fixed RHSA-2022:5565
Red Hat Enterprise Linux RT EUS (v.8.4)Fixed RHSA-2022:5633
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2022:5267
Red Hat Enterprise Linux Real Time EUS (v. 8.2)Fixed RHSA-2022:5224
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2022:5267
Red Hat Enterprise Linux Real Time for NFV EUS (v. 8.2)Fixed RHSA-2022:5224
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2022:5232
Red Hat Enterprise Linux Server AUS (v. 7.3)Fixed RHSA-2022:5806
Red Hat Enterprise Linux Server AUS (v. 7.4)Fixed RHSA-2022:5157
Red Hat Enterprise Linux Server AUS (v. 7.6)Fixed RHSA-2022:6432
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2022:6741
Red Hat Enterprise Linux Server E4S (v. 7.6)Fixed RHSA-2022:6432
Red Hat Enterprise Linux Server E4S (v. 7.7)Fixed RHSA-2022:6741
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2022:5232
Red Hat Enterprise Linux Server Optional AUS (v. 7.3)Fixed RHSA-2022:5806
Red Hat Enterprise Linux Server Optional AUS (v. 7.4)Fixed RHSA-2022:5157
Red Hat Enterprise Linux Server Optional AUS (v. 7.6)Fixed RHSA-2022:6432
Red Hat Enterprise Linux Server Optional AUS (v. 7.7)Fixed RHSA-2022:6741
Red Hat Enterprise Linux Server Optional E4S (v. 7.6)Fixed RHSA-2022:6432
Red Hat Enterprise Linux Server Optional E4S (v. 7.7)Fixed RHSA-2022:6741
Red Hat Enterprise Linux Server Optional TUS (v. 7.6)Fixed RHSA-2022:6432
Red Hat Enterprise Linux Server Optional TUS (v. 7.7)Fixed RHSA-2022:6741
Red Hat Enterprise Linux Server TUS (v. 7.6)Fixed RHSA-2022:6432
Red Hat Enterprise Linux Server TUS (v. 7.7)Fixed RHSA-2022:6741
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2022:5232
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2022:5232
Red Hat Enterprise Linux for Real Time (v. 7)Fixed RHSA-2022:5236
Red Hat Enterprise Linux for Real Time for NFV (v. 7)Fixed RHSA-2022:5236
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2022:5564
Not affected: 1 product
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-1729
  2. 2026-11-05 Affected versions changed · Red Hat

References

Patch 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences