PT-2022-4126 · Linux+3 · Linux Kernel+3

David Hildenbrand · Published 2022-08-07 · Updated 2025-10-02 · CVE-2022-2590

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition was found in the Linux kernel's memory subsystem, related to the copy-on-write (COW) breakage of private read-only shared memory mappings. This issue allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system. The problem is similar to the Dirty COW vulnerability but is limited to affecting data in shared memory (shmem / tmpfs). Exploitation of this issue can be used to modify running executable files that use shared memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALSA-2025_16880

ALT-PU-2022-2472

ALT-PU-2022-2573

ALT-PU-2022-2594

ALT-PU-2022-2915

ALT-PU-2022-2919

BDU:2022-04965

CVE-2022-2590

OPENSUSE-SU-2024:12257-1

OPENSUSE-SU-2024:13704-1

USN-6071-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Ubuntu

References · 228

• 🔥 https://github.com/hyeonjun17/CVE-2022-2590-analysis · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-2590 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23455 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4095 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-2590 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1859 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-2590 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12257-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2590 · Security Note
• https://ubuntu.com/security/CVE-2023-26545 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-2590 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6071-1 · Vendor Advisory
• https://lore.kernel.org/linux-mm/20220808073232.8808-1-david%40redhat.com · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3586 · Vendor Advisory