CVE-2022-21505
Summary
| CVE | CVE-2022-21505 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2024-12-24 19:15:06 UTC |
| Updated | 2026-10-14 16:17:25 UTC |
| Description | In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). |
Risk And Classification
Primary CVSS: v3.1 6.7 MEDIUM from [email protected]
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.002010000 probability, percentile 0.092500000 (date 2026-10-14)
Problem Types: CWE-346 | In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). | CWE-346 CWE-346 Origin Validation Error
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 6.7 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | DECLARED | 6.7 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Oracle Corporation | Oracle Linux | affected Oracle Linux: 7 | Not specified |
| CNA | Oracle Corporation | Oracle Linux | affected Oracle Linux: 8 | Not specified |
| CNA | Oracle Corporation | Oracle Linux | affected Oracle Linux: 9 | Not specified |
| ADP | Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem | affected V1.1 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b | [email protected] | git.kernel.org | Broken Link |
| linux.oracle.com/cve/CVE-2022-21505.html | [email protected] | linux.oracle.com | Vendor Advisory |
| cert-portal.siemens.com/productcert/html/ssa-794697.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159988 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9612)
- 159989 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9601)
- 159990 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9602)
- 159991 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9609)
- 160043 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9709)
- 160045 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9710)
- 160583 Oracle Enterprise Linux Security Update for kernel (ELSA-2023-2458)
- 180939 Debian Security Update for linux (CVE-2022-21505)
- 199295 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6031-1)
- 241417 Red Hat Update for kernel security (RHSA-2023:2458)
- 241468 Red Hat Update for kernel-rt (RHSA-2023:2148)
- 354049 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-034
- 354051 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-019
- 354055 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2022-007
- 354439 Amazon Linux Security Advisory for kernel : ALAS2022-2022-150
- 354468 Amazon Linux Security Advisory for kernel : ALAS2022-2022-185
- 354542 Amazon Linux Security Advisory for kernel : ALAS-2022-185
- 355199 Amazon Linux Security Advisory for kernel : ALAS2023-2023-070
- 377117 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2022:0158)
- 6140350 AWS Bottlerocket Security Update for kernel (GHSA-cg53-fmp7-3g22)
- 752461 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2803-1)
- 752463 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2809-1)
- 752502 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2875-1)
- 753135 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2722-1)
- 753156 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2741-1)
- 753316 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2892-1)
- 941023 AlmaLinux Security Update for kernel (ALSA-2023:2458)
- 941061 AlmaLinux Security Update for kernel-rt (ALSA-2023:2148)