6.7
Moyenne
CVE-2022-21499 KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown
Description
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Linux | Versions non publiées | |
| Oracle VM | Versions non publiées |
Autres CVE de Oracle Linux
Les 10 CVE de Oracle Linux →
CVE-2026-35233
An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link…
4.4
Moyenne
CVE-2026-21996
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an…
3.3
Faible
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names
5.5
Moyenne
CVE-2022-21505
In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with…
6.7
Moyenne