ID:8299 - Exploit for Resource management error in Linux kernel - CVE-2022-2585

 
Main Vulnerability Database Exploits ID:8299 - Exploit for Resource management error in Linux kernel - CVE-2022-2585

ID:8299 - Exploit for Resource management error in Linux kernel - CVE-2022-2585

Published: August 25, 2022


Vulnerability identifier: #VU66394
Vulnerability risk: Low
CVE-ID: CVE-2022-2585
CWE-ID: CWE-399
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to perform a denial of service (DoS) attack or escalate privileges on the system.

The vulnerability exists due to improper management of internal resources in POSIX CPU timers when handling death of a process. A local user can crash the kernel or execute arbitrary code.


Remediation

Install updates from vendor's website.