Name: CVE-2022-22942: Use After Free
Creator: Rapid7
Published: 2023-12-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-22942, CWE-416, Metasploit Module, CVSS 7.8, EPSS 0.13103

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade kernel-tools-libs-devel	May 4, 2022	Mar 10, 2022
Centos_linux	—	Upgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_24_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-3_10_0-1160_25_1Upgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-3_10_0-1160_21_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_24_1Upgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_25_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_21_1	Feb 23, 2022	Feb 22, 2022
Debian	—	Upgrade linux	Mar 10, 2022	Mar 10, 2022
Huawei Euleros 2_0_sp10	—	Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool	May 9, 2022	Apr 18, 2022
Huawei Euleros 2_0_sp5	—	Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-headers	Apr 26, 2022	Apr 18, 2022
Huawei Euleros 2_0_sp9	—	Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel	Apr 19, 2022	Apr 18, 2022
Oracle_linux	—	Upgrade kernelUpgrade kernel-uek	Feb 23, 2022	Jan 27, 2022
Redhat_linux	—	Upgrade kernelNo solution existsUpgrade kernel-rt	Feb 23, 2022	Feb 22, 2022
Rocky_linux	—	Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-devel	Mar 5, 2024	Dec 13, 2023
Suse	—	Upgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade kernel-vanillaUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dlm-kmp-preemptUpgrade dtb-alteraUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-vanilla-develUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-zteUpgrade dtb-rockchipUpgrade kernel-debug-baseUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade dtb-alUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade reiserfs-kmp-preemptUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-preempt-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-azure-baseUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade dtb-sprdUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kb	Feb 11, 2022	Feb 9, 2022
Ubuntu	—	Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1063-gkeUpgrade linux-image-5.4.0-1053-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1087-oracleUpgrade linux-image-4.15.0-169-lowlatencyUpgrade linux-image-5.4.0-1070-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1066-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1056-kvmUpgrade linux-image-5.4.0-1028-bluefieldUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-100-generic-lpaeUpgrade linux-image-4.15.0-1116-gcpUpgrade linux-image-oemUpgrade linux-image-5.4.0-1034-gkeopUpgrade linux-image-4.15.0-1103-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.13.0-30-lowlatencyUpgrade linux-image-gke-5.4Upgrade linux-image-virtualUpgrade linux-image-5.14.0-1022-oemUpgrade linux-image-5.4.0-1015-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1018-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-169-genericUpgrade linux-image-kvmUpgrade linux-image-5.13.0-1013-kvmUpgrade linux-image-4.15.0-1107-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1070-azureUpgrade linux-image-5.4.0-1065-gcpUpgrade linux-image-5.13.0-1014-azureUpgrade linux-image-5.4.0-100-lowlatencyUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.13.0-30-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-snapdragonUpgrade linux-image-ibmUpgrade linux-image-5.13.0-1017-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1131-azureUpgrade linux-image-5.4.0-1064-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1035-dell300xUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-intelUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-100-genericUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-5.13.0-1014-awsUpgrade linux-image-4.15.0-1120-snapdragonUpgrade linux-image-5.13.0-1017-raspi-nolpaeUpgrade linux-image-5.13.0-1015-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.13.0-30-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-30-generic-64kUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-169-generic-lpaeUpgrade linux-image-aws-hwe	Feb 9, 2022	Feb 9, 2022
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Dec 13, 2023

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence