Vulnerability-Lookup

RHBA-2022:5869

Vulnerability from csaf_redhat - Published: 2022-08-10 12:16 - Updated: 2026-08-15 22:34

Summary

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11 low-latency extras update

Severity

Moderate

Notes

Topic: Red Hat OpenShift Container Platform low-latency extras release 4.11, which provides an update for cnf-tests-container, dpdk-base-container and performance-addon-operator-must-gather-rhel8-container is now available. Secondary scheduler builds and numaresources-operator are also available for developer preview with this release, however they are not intended for production.

Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the extra low-latency container images for Red Hat OpenShift Container Platform 4.11. See the following advisory for the container images for this release: https://access.redhat.com/errata/RHSA-2022:5069 All OpenShift Container Platform users are advised to upgrade to these updated packages and images.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-29526

A flaw was found in the syscall.Faccessat function when calling a process by checking the group. This flaw allows an attacker to check the process group permissions rather than a member of the file's group, affecting system availability.

6.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-358 - Improperly Implemented Security Check for Standard

Affected products

Fixed 5 products

Product	Version	Remediation
Unresolved product id: 8Base-RHOSE-4.11:openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHOSE-4.11:openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHOSE-4.11:openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHOSE-4.11:openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-RHOSE-4.11:openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64	—	Vendor Fix fix

Threats

Impact Moderate

References

15 references

URL	Category
https://access.redhat.com/errata/RHBA-2022:5869	self
https://issues.redhat.com/browse/CNF-5541	external
https://bugzilla.redhat.com/show_bug.cgi?id=2095539	external
https://bugzilla.redhat.com/show_bug.cgi?id=2072709	external
https://bugzilla.redhat.com/show_bug.cgi?id=2078239	external
https://bugzilla.redhat.com/show_bug.cgi?id=2081852	external
https://bugzilla.redhat.com/show_bug.cgi?id=2087159	external
https://bugzilla.redhat.com/show_bug.cgi?id=2089414	external
https://bugzilla.redhat.com/show_bug.cgi?id=2090184	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-29526	self
https://bugzilla.redhat.com/show_bug.cgi?id=2084085	external
https://www.cve.org/CVERecord?id=CVE-2022-29526	external
https://nvd.nist.gov/vuln/detail/CVE-2022-29526	external
https://groups.google.com/g/golang-announce/c/Y5q…	external

Acknowledgments

Joël Gähwiler

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform low-latency extras release 4.11, which provides an update for cnf-tests-container, dpdk-base-container and performance-addon-operator-must-gather-rhel8-container is now available.\nSecondary scheduler builds and\nnumaresources-operator are also available for developer preview with this\nrelease, however they are not intended for production.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the extra low-latency container images for Red Hat OpenShift Container Platform 4.11. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHSA-2022:5069\n\nAll OpenShift Container Platform users are advised to upgrade to these updated packages and images.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2022:5869",
        "url": "https://access.redhat.com/errata/RHBA-2022:5869"
      },
      {
        "category": "external",
        "summary": "https://issues.redhat.com/browse/CNF-5541",
        "url": "https://issues.redhat.com/browse/CNF-5541"
      },
      {
        "category": "external",
        "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2095539",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095539"
      },
      {
        "category": "external",
        "summary": "2072709",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072709"
      },
      {
        "category": "external",
        "summary": "2078239",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2078239"
      },
      {
        "category": "external",
        "summary": "2081852",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081852"
      },
      {
        "category": "external",
        "summary": "2087159",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2087159"
      },
      {
        "category": "external",
        "summary": "2089414",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2089414"
      },
      {
        "category": "external",
        "summary": "2090184",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2090184"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_5869.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11 low-latency extras update",
    "tracking": {
      "current_release_date": "2026-08-15T22:34:01+00:00",
      "generator": {
        "date": "2026-08-15T22:34:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHBA-2022:5869",
      "initial_release_date": "2022-08-10T12:16:08+00:00",
      "revision_history": [
        {
          "date": "2022-08-10T12:16:08+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-08-10T12:16:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-15T22:34:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.11",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.11",
                  "product_id": "8Base-RHOSE-4.11",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.11::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64",
                "product": {
                  "name": "openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64",
                  "product_id": "openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/cnf-tests-rhel8\u0026tag=v4.11.0-51"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64",
                "product": {
                  "name": "openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64",
                  "product_id": "openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/noderesourcetopology-scheduler-container-rhel8\u0026tag=v4.11.0-28"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64",
                "product": {
                  "name": "openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64",
                  "product_id": "openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/numaresources-operator-bundle\u0026tag=v4.11.0-80"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64",
                "product": {
                  "name": "openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64",
                  "product_id": "openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/numaresources-rhel8-operator\u0026tag=v4.11.0-74"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64",
                "product": {
                  "name": "openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64",
                  "product_id": "openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/performance-addon-operator-must-gather-rhel8\u0026tag=v4.11.0-115"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64 as a component of Red Hat OpenShift Container Platform 4.11",
          "product_id": "8Base-RHOSE-4.11:openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64"
        },
        "product_reference": "openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64",
        "relates_to_product_reference": "8Base-RHOSE-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64 as a component of Red Hat OpenShift Container Platform 4.11",
          "product_id": "8Base-RHOSE-4.11:openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64"
        },
        "product_reference": "openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64",
        "relates_to_product_reference": "8Base-RHOSE-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64 as a component of Red Hat OpenShift Container Platform 4.11",
          "product_id": "8Base-RHOSE-4.11:openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64"
        },
        "product_reference": "openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64",
        "relates_to_product_reference": "8Base-RHOSE-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64 as a component of Red Hat OpenShift Container Platform 4.11",
          "product_id": "8Base-RHOSE-4.11:openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64"
        },
        "product_reference": "openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64",
        "relates_to_product_reference": "8Base-RHOSE-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64 as a component of Red Hat OpenShift Container Platform 4.11",
          "product_id": "8Base-RHOSE-4.11:openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64"
        },
        "product_reference": "openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64",
        "relates_to_product_reference": "8Base-RHOSE-4.11"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Jo\u00ebl G\u00e4hwiler"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2022-29526",
      "cwe": {
        "id": "CWE-358",
        "name": "Improperly Implemented Security Check for Standard"
      },
      "discovery_date": "2022-05-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2084085"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the syscall.Faccessat function when calling a process by checking the group. This flaw allows an attacker to check the process group permissions rather than a member of the file\u0027s group, affecting system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: syscall: faccessat checks wrong group",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.11:openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64",
          "8Base-RHOSE-4.11:openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64",
          "8Base-RHOSE-4.11:openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64",
          "8Base-RHOSE-4.11:openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64",
          "8Base-RHOSE-4.11:openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-29526"
        },
        {
          "category": "external",
          "summary": "RHBZ#2084085",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2084085"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-29526",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-29526"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-29526",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29526"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU",
          "url": "https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU"
        }
      ],
      "release_date": "2022-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-08-10T12:16:08+00:00",
          "details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html\n\nDetails on how to access this content are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html.",
          "product_ids": [
            "8Base-RHOSE-4.11:openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64",
            "8Base-RHOSE-4.11:openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64",
            "8Base-RHOSE-4.11:openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64",
            "8Base-RHOSE-4.11:openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64",
            "8Base-RHOSE-4.11:openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2022:5869"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSE-4.11:openshift4/cnf-tests-rhel8@sha256:2fd2a5e84572f7778428a8eb5ce544676f7e0a40e08ce6fc06672c4914b5e72c_amd64",
            "8Base-RHOSE-4.11:openshift4/noderesourcetopology-scheduler-container-rhel8@sha256:5b99ba80888ee16602779b9aa4b2dcbadee205c23b1f23b68cf11c752b16243f_amd64",
            "8Base-RHOSE-4.11:openshift4/numaresources-operator-bundle@sha256:55809e710697b1c2f53b6d84749a40398106678bf4150bb157fb929b92b44933_amd64",
            "8Base-RHOSE-4.11:openshift4/numaresources-rhel8-operator@sha256:c808cdd9231f68543e00897d775c7ddbc15f480e7c923eb09ba63d6fe8177cf0_amd64",
            "8Base-RHOSE-4.11:openshift4/performance-addon-operator-must-gather-rhel8@sha256:33e913731af09fdbf7feb25d205259c4f06f79a3a8b6555bd330222e10fa4edf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: syscall: faccessat checks wrong group"
    }
  ]
}

CVE-2022-29526 (GCVE-0-2022-29526)

Vulnerability from cvelistv5 – Published: 2022-06-22 13:15 – Updated: 2024-08-03 06:26

Summary

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

9 references

URL	Tags
https://groups.google.com/g/golang-announce	x_refsource_MISC
https://github.com/golang/go/issues/52313	x_refsource_MISC
https://groups.google.com/g/golang-announce/c/Y5q…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2022072…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/202208-02	vendor-advisoryx_refsource_GENTOO
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:26:06.342Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/golang/go/issues/52313"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU"
          },
          {
            "name": "FEDORA-2022-fae3ecee19",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
          },
          {
            "name": "FEDORA-2022-ffe7dba2cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/"
          },
          {
            "name": "FEDORA-2022-ba365d3703",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220729-0001/"
          },
          {
            "name": "GLSA-202208-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-02"
          },
          {
            "name": "FEDORA-2022-30c5ed5625",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-17T03:08:35.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/g/golang-announce"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/golang/go/issues/52313"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU"
        },
        {
          "name": "FEDORA-2022-fae3ecee19",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
        },
        {
          "name": "FEDORA-2022-ffe7dba2cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/"
        },
        {
          "name": "FEDORA-2022-ba365d3703",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220729-0001/"
        },
        {
          "name": "GLSA-202208-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-02"
        },
        {
          "name": "FEDORA-2022-30c5ed5625",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-29526",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://groups.google.com/g/golang-announce",
              "refsource": "MISC",
              "url": "https://groups.google.com/g/golang-announce"
            },
            {
              "name": "https://github.com/golang/go/issues/52313",
              "refsource": "MISC",
              "url": "https://github.com/golang/go/issues/52313"
            },
            {
              "name": "https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU",
              "refsource": "MISC",
              "url": "https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU"
            },
            {
              "name": "FEDORA-2022-fae3ecee19",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
            },
            {
              "name": "FEDORA-2022-ffe7dba2cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/"
            },
            {
              "name": "FEDORA-2022-ba365d3703",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220729-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220729-0001/"
            },
            {
              "name": "GLSA-202208-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-02"
            },
            {
              "name": "FEDORA-2022-30c5ed5625",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-29526",
    "datePublished": "2022-06-22T13:15:32.000Z",
    "dateReserved": "2022-04-20T00:00:00.000Z",
    "dateUpdated": "2024-08-03T06:26:06.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHBA-2022:5869

CVE-2022-29526 (GCVE-0-2022-29526)

Tags

Sightings

Nomenclature