CVE-2022-1729

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-366CWE-362

Affected software

No affected versions have been published.

Timeline

Published
Sep 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-17304.6Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4.CVE-2022-17319.8Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authenticCVE-2022-17326.5The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allCVE-2022-17337.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.CVE-2022-17347.0A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write wheCVE-2022-17357.8Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.CVE-2022-17369.8Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.CVE-2022-17377.5Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-oCVE-2022-17387.5Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to an out-of-bounds read, which could allow an attacker to leak sensitive dataCVE-2022-17396.8The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a tCVE-2022-17404.6The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application exCVE-2022-17416.8The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gai
CVE-2022-1729: High severity, CVSS 7.0 | Vulnix