fr Sign in

7.0 High

CVE-2022-38014 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

Description

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Windows Subsystem for Linux (WSL2) 5.0	5.0.0.0 → < 5.15.62.1	5.15.62.1
Azure EFLOW 1.4	1.4.0.0 → latest	No fix stated

References

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability msrc.microsoft.com

Timeline

Published November 9, 2022
Last modified August 10, 2026

The 8 CVEs of Windows Subsystem for Linux (WSL2) →

CVE-2026-102204 Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized… 7.8 High CVE-2026-96206 Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information… 6.5 Medium CVE-2026-85879 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to… 7.0 High CVE-2026-57973 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to… 6.3 Medium

Track this CVE