The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACESEIZE code path allows attackers to bypass intended restrictions on setting the PTSUSPEND_SECCOMP flag.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-30594.json"
[
{
"target": {
"file": "kernel/ptrace.c"
},
"digest": {
"line_hashes": [
"273686095459802598239125399427819057489",
"119337656374500170126081939304945132703",
"18873732625554070287911686749840374645",
"244690578628117664470219192729583418358",
"104866376477285073550489250341550137092",
"99193385191706625883274227817909422992",
"260569950501473300078533825319205874152",
"336256026666025487449651451666413774910",
"300080567232992531295431219438528238962",
"276416327790651966774933117091603299976",
"151483453601785128843091596142059025304",
"73452522869165368284159708609075687825",
"278180264936392295925474767705801148677",
"5753705355708101892764171289409535057",
"326374911527773091005738033769411630476",
"260574296510942653207077008000194577467",
"58955265256819187394194562769190227235",
"287930904182574196121634352368978449905",
"94507019316987775632178528374021713033",
"327873310491380554289741572068853362740",
"29526317901433735328144275744272230255",
"58115078224158633277569992258152801811",
"147374374734606690212964503388594524945",
"204848893839056992660523109646020609376",
"73132040739191473162353429143459384300"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@ee1fee900537b5d9560e9f937402de5ddc8412f3",
"signature_type": "Line",
"id": "CVE-2022-30594-8bb15f18",
"signature_version": "v1",
"deprecated": false
},
{
"target": {
"file": "kernel/ptrace.c",
"function": "ptrace_setoptions"
},
"digest": {
"function_hash": "226412308472189880539566178553284252255",
"length": 638.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@ee1fee900537b5d9560e9f937402de5ddc8412f3",
"signature_type": "Function",
"id": "CVE-2022-30594-bc18e055",
"signature_version": "v1",
"deprecated": false
},
{
"target": {
"file": "kernel/ptrace.c",
"function": "ptrace_attach"
},
"digest": {
"function_hash": "315138413735126463287469741522038566720",
"length": 1495.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@ee1fee900537b5d9560e9f937402de5ddc8412f3",
"signature_type": "Function",
"id": "CVE-2022-30594-bcb14f7a",
"signature_version": "v1",
"deprecated": false
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-30594.json"
[
{
"target": {
"file": "kernel/ptrace.c"
},
"digest": {
"line_hashes": [
"273686095459802598239125399427819057489",
"119337656374500170126081939304945132703",
"18873732625554070287911686749840374645",
"244690578628117664470219192729583418358",
"104866376477285073550489250341550137092",
"99193385191706625883274227817909422992",
"260569950501473300078533825319205874152",
"336256026666025487449651451666413774910",
"300080567232992531295431219438528238962",
"276416327790651966774933117091603299976",
"151483453601785128843091596142059025304",
"73452522869165368284159708609075687825",
"278180264936392295925474767705801148677",
"5753705355708101892764171289409535057",
"326374911527773091005738033769411630476",
"260574296510942653207077008000194577467",
"58955265256819187394194562769190227235",
"287930904182574196121634352368978449905",
"94507019316987775632178528374021713033",
"327873310491380554289741572068853362740",
"29526317901433735328144275744272230255",
"58115078224158633277569992258152801811",
"147374374734606690212964503388594524945",
"204848893839056992660523109646020609376",
"73132040739191473162353429143459384300"
],
"threshold": 0.9
},
"source": "https://github.com/torvalds/linux/commit/ee1fee900537b5d9560e9f937402de5ddc8412f3",
"signature_type": "Line",
"id": "CVE-2022-30594-0b65cbea",
"signature_version": "v1",
"deprecated": false
},
{
"target": {
"file": "kernel/ptrace.c",
"function": "ptrace_setoptions"
},
"digest": {
"function_hash": "226412308472189880539566178553284252255",
"length": 638.0
},
"source": "https://github.com/torvalds/linux/commit/ee1fee900537b5d9560e9f937402de5ddc8412f3",
"signature_type": "Function",
"id": "CVE-2022-30594-83d2f7e6",
"signature_version": "v1",
"deprecated": false
},
{
"target": {
"file": "kernel/ptrace.c",
"function": "ptrace_attach"
},
"digest": {
"function_hash": "315138413735126463287469741522038566720",
"length": 1495.0
},
"source": "https://github.com/torvalds/linux/commit/ee1fee900537b5d9560e9f937402de5ddc8412f3",
"signature_type": "Function",
"id": "CVE-2022-30594-ae4105b4",
"signature_version": "v1",
"deprecated": false
}
]