Read the docs
TI-2022-05883 Aliases CVE-2022-21499GHSA-rcmc-qxj3-63p4

Out-of-bounds write in Oracle Linux

Priority LOW 33CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 12 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00619 49th percentileScored 2026-11-07
Fix Partial Red Hat: 5 advisoriesRed Hat: 12 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OracleOracle LinuxOracle Linux: 6; Oracle Linux: 7; Oracle Linux: 8—No fix listedCNA
OracleOracle VMOracle VM: 3—No fix listedCNA
  • Oracle Linux VendorOracle Affected Oracle Linux: 6; Oracle Linux: 7; Oracle Linux: 8 Fixed in — No fix listed CNA
  • Oracle VM VendorOracle Affected Oracle VM: 3 Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*6VulnerableOracle
cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*7VulnerableOracle
cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:*8VulnerableOracle
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
  • cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:* Versions 6 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* Versions 7 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:* Versions 8 Vulnerable ·Oracle
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian

Remediation

Red Hat 5 advisories

  • RHSA-2024:0724 Released 2024-02-07 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-tools-libs-devel-4.18.0-372.91.1.el8_6
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) bpftool-4.18.0-372.91.1.el8_6, kernel-4.18.0-372.91.1.el8_6, kernel-abi-stablelists-4.18.0-372.91.1.el8_6 +19
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.91.1.el8_6, perf-4.18.0-372.91.1.el8_6
  • RHSA-2022:8267 Released 2022-11-15 · Red Hat rating Moderate
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-162.6.1.el9_1
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-debug-devel-5.14.0-162.6.1.el9_1, kernel-debug-devel-matched-5.14.0-162.6.1.el9_1, kernel-devel-5.14.0-162.6.1.el9_1 +5
    • Red Hat Enterprise Linux BaseOS (v. 9) bpftool-5.14.0-162.6.1.el9_1, kernel-5.14.0-162.6.1.el9_1, kernel-abi-stablelists-5.14.0-162.6.1.el9_1 +14
  • RHSA-2022:7933 Released 2022-11-15 · Red Hat rating Moderate
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-core-5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-debug-5.14.0-162.6.1.rt21.168.el9_1 +7
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-core-5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-debug-5.14.0-162.6.1.rt21.168.el9_1 +9
Show 2 more Red Hat advisories
  • RHSA-2022:7683 Released 2022-11-08 · Red Hat rating Moderate
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-425.3.1.el8
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-425.3.1.el8, kernel-4.18.0-425.3.1.el8, kernel-abi-stablelists-4.18.0-425.3.1.el8 +19
  • RHSA-2022:7444 Released 2022-11-08 · Red Hat rating Moderate
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-425.3.1.rt7.213.el8, kernel-rt-core-4.18.0-425.3.1.rt7.213.el8, kernel-rt-debug-4.18.0-425.3.1.rt7.213.el8 +7
    • Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-425.3.1.rt7.213.el8, kernel-rt-core-4.18.0-425.3.1.rt7.213.el8, kernel-rt-debug-4.18.0-425.3.1.rt7.213.el8 +9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2022:7683
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2022:8267
Red Hat CodeReady Linux Builder EUS (v.8.6)Fixed RHSA-2024:0724
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2022:8267
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2022:7683
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2022:8267
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:0724
Red Hat Enterprise Linux Real Time (v. 8)Fixed RHSA-2022:7444
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2022:7933
Red Hat Enterprise Linux Real Time for NFV (v. 8)Fixed RHSA-2022:7444
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2022:7933
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2024:0724
Not affected: 1 product
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-21499
  2. 2026-10-03 Alias added: GHSA-rcmc-qxj3-63p4

References

Patch 1

Advisory 2

  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04443 The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1… KEVCVSS 3.1HIGH 7.8
  • TI-2014-02517 The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not… KEVCVSS 3.1HIGH 7.8
  • TI-2015-00205 Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and… CVSS 2.0HIGH 10.0
See all 229 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences