CVE-2022-21499

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown

Medium · published June 9, 2022

CVSS v3.1
6.7
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00619 · 49.0th percentile
Published
2022-06-09T20:15Z
EPSS history
Timeline
  • 09 JUN 20:15Z
    KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown
    cvelistv5