Skip to content
Fencer Vulns
medium 5.3

CVE-2022-29526 json

golang.org/x/sys/unix has Incorrect privilege reporting in syscall

published 2022-06-22 4 y ago modified 2026-09-10 1 mo ago also BIT-golang-2022-29526 , EUVD-2022-6106 , GHSA-p782-xgp4-8hr8 , GO-2022-0493

cvss
5.3
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
3.0%
EPSS 3.0% chance of exploitation in 30 days, percentile 87%
public exploits
0
none known

Summary

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

Patch / fix

  • go golang.org/x/sys 0.0.0-20220412211240-33da011f77ad
  • bitnami golang 1.17.10, 1.18.2
  • go stdlib 1.17.10, 1.18.2
  • golang go 1.17.10, 1.18.2
  • golang-1.16 Ubuntu 20.04 LTS 1.16.2-0ubuntu1~20.04.1
  • golang-1.18 Ubuntu 18.04 LTS 1.18.1-1ubuntu1~18.04.4
  • golang-1.18 Ubuntu 20.04 LTS 1.18.1-1ubuntu1~20.04.2
  • golang-1.18 Ubuntu 22.04 LTS 1.18.1-1ubuntu1.1
  • golang-1.16 Ubuntu Pro 18.04 LTS 1.16.2-0ubuntu1~18.04.2+esm1

ubuntu advisories UBUNTU-CVE-2022-29526

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • delve RHEL 8 1.7.2-1.module+el8.6.0+12972+ebab5911
  • golang RHEL 8 1.17.10-1.module+el8.6.0+15486+6d4da7db
  • go-toolset RHEL 8 1.17.10-1.module+el8.6.0+15486+6d4da7db
  • golang-bin RHEL 8 1.17.10-1.module+el8.6.0+15486+6d4da7db
  • golang-src RHEL 8 1.17.10-1.module+el8.6.0+15486+6d4da7db
  • golang-misc RHEL 8 1.17.10-1.module+el8.6.0+15486+6d4da7db
  • golang-race RHEL 8 1.17.10-1.module+el8.6.0+15486+6d4da7db
  • golang-tests RHEL 8 1.17.10-1.module+el8.6.0+15486+6d4da7db

red hat advisories RHSA-2022:5337RHSA-2022:6277RHSA-2022:5799RHSA-2022:5729

  • go1.18-openssl SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE Real Time 15 SP3 +6 more 1.18.10.1-150000.1.9.1
  • go1.17 SLE Module for Development Tools 15 SP4, SLE Module for Development Tools 15 SP3, openSUSE Leap 15.4 +1 more 1.17.10-150000.1.34.1
  • go1.18 SLE Module for Development Tools 15 SP4, SLE Module for Development Tools 15 SP3, openSUSE Leap 15.4 +1 more 1.18.2-150000.1.17.1

suse advisories SUSE-SU-2023:2312-1SUSE-SU-2022:1862-1SUSE-SU-2022:1829-1

  • go1.17 openSUSE Tumbleweed 1.17.10-1.1
  • go1.18 openSUSE Tumbleweed 1.18.2-1.1

opensuse advisories openSUSE-SU-2024:12065-1openSUSE-SU-2024:12066-1

  • golang Rocky Linux 9 1.17.12-1.el9_0
  • go-toolset Rocky Linux 9 1.17.12-1.el9_0
  • delve Rocky Linux 8 1.7.2-1.module+el8.6.0+824+8e984c20
  • golang Rocky Linux 8 1.17.10-1.module+el8.6.0+986+efe4cea4
  • go-toolset Rocky Linux 8 1.17.10-1.module+el8.6.0+986+efe4cea4

rocky linux advisories RLSA-2022:5799RLSA-2022:5337

  • docker Alpine 3.24, Alpine 3.23, Alpine 3.22 +7 more 20.10.16-r0

alpine advisories ALPINE-CVE-2022-29526

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kured CBL-Mariner 2.0 1.13.2-1
  • nmi CBL-Mariner 2.0 1.8.11-2
  • prometheus CBL-Mariner 2.0, Azure Linux 3.0 2.37.0-1
  • sriov-network-device-plugin CBL-Mariner 2.0 3.6.2-2
  • moby-engine Azure Linux 3.0 25.0.3-1
  • multus Azure Linux 3.0 4.0.2-1
  • node-problem-detector Azure Linux 3.0 0.8.15-1
  • sriov-network-device-plugin Azure Linux 3.0 3.7.0-1

azure linux advisories AZL-31975AZL-33622AZL-33629AZL-33644AZL-35007AZL-35014

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-29526 updated cvss 6.2

golang: syscall: faccessat checks wrong group

  • Red Hat OpenShift Developer Tools and Services jenkins-operator-container
    affected: no fix planned “Will not fix”
  • Red Hat OpenShift Service Mesh 2.0 servicemesh-grafana, servicemesh-operator, servicemesh-prometheus, servicemesh-grafana-prometheus Red Hat 3scale API Management Platform 2 3scale-amp2/3scale-apicast-operator-bundle
    affected: no fix available
  • Red Hat Advanced Cluster Management for Kubernetes 2 thanos-contain, rhacm2/registration, rhacm2/search-rhel8, rhacm2/thanos-rhel7, search-operator-container, rhacm2/rcm-controller-rhel8, +19 more
    affected: no fix available, no fix planned “Will not fix”
  • Red Hat Ansible Automation Platform 2 receptor Red Hat Ceph Storage 5 rhceph/rhceph-5-dashboard-rhel8 Red Hat Openshift Data Foundation 4 odf4/mcg-rhel9-operator Red Hat OpenShift GitOps openshift-gitops-1/gitops-operator-bundle Red Hat Quay 3 quay/quay-rhel8, quay/clair-rhel8, quay/quay-builder-rhel8, quay/quay-openshift-bridge-rhel8-operator, quay/quay-container-security-operator-rhel8
    affected: no fix available
  • Red Hat Service Telemetry Framework 1.4 for RHEL 8 stf/sg-core-rhel8
    affected: no fix planned “Will not fix”
  • Red Hat CNV 4.12 for RHEL 8 container-native-virtualization/libguestfs-tools v4.12.0-255
    fixed: vendor fix RHSA-2023:0408
  • Red Hat OpenShift Service Mesh 2.1 servicemesh-operator 2.1.5-1.el8, servicemesh-prometheus 2.23.0-9.el8
    fixed: vendor fix RHSA-2022:6277
  • Red Hat OSSO 1.0 for RHEL 8 openshift-secondary-scheduler-operator/secondary-scheduler-operator-rhel8 v1.0-28
    fixed: vendor fix RHSA-2022:5699
show 10 more
  • Red Hat Ceph Storage 6.1 Tools rhceph/rhceph-6-dashboard-rhel9 6-75
    fixed: vendor fix RHSA-2023:3642
  • Red Hat Enterprise Linux AppStream (v. 8) delve 1.7.2-1.module+el8.6.0+12972+ebab5911, golang 1.17.10-1.module+el8.6.0+15486+6d4da7db, go-toolset 1.17.10-1.module+el8.6.0+15486+6d4da7db, golang-bin 1.17.10-1.module+el8.6.0+15486+6d4da7db, golang-src 1.17.10-1.module+el8.6.0+15486+6d4da7db, golang-misc 1.17.10-1.module+el8.6.0+15486+6d4da7db, +2 more
    fixed: vendor fix RHSA-2022:5337
  • Red Hat Enterprise Linux AppStream (v. 9) golang 1.17.12-1.el9_0, go-toolset 1.17.12-1.el9_0, golang-bin 1.17.12-1.el9_0, golang-src 1.17.12-1.el9_0, golang-misc 1.17.12-1.el9_0, golang-race 1.17.12-1.el9_0, +1 more
    fixed: vendor fix RHSA-2022:5799
  • Red Hat Migration Toolkit 1.7 rhmtc/openshift-migration-must-gather-rhel8 v1.7.3-4
    fixed: vendor fix RHSA-2022:5840
  • Red Hat OpenShift Container Platform 4.10 cri-o 1.23.3-11.rhaos4.10.gitddf4b1a.1.el7, cri-o 1.23.3-11.rhaos4.10.gitddf4b1a.1.el8, openshift 4.10.0-202207192015.p0.g012e945.assembly.stream.el7, openshift 4.10.0-202207192015.p0.g012e945.assembly.stream.el8, openshift-clients 4.10.0-202207192015.p0.g45460a5.assembly.stream.el7, openshift-clients 4.10.0-202207192015.p0.g45460a5.assembly.stream.el8, +5 more
    fixed: vendor fix RHSA-2022:5729
  • Red Hat OpenShift Container Platform 4.11 openshift4/cnf-tests-rhel8 v4.11.0-51, openshift4/numaresources-rhel8-operator v4.11.0-74, openshift4/numaresources-operator-bundle v4.11.0-80, openshift4/performance-addon-operator-must-gather-rhel8 v4.11.0-115, openshift4/noderesourcetopology-scheduler-container-rhel8 v4.11.0-28
    fixed: vendor fix RHBA-2022:5869
  • Red Hat RHACS 3.72 for RHEL 8 advanced-cluster-security/rhacs-docs-rhel8 3.72.0-3, advanced-cluster-security/rhacs-main-rhel8 3.72.0-3, advanced-cluster-security/rhacs-roxctl-rhel8 3.72.0-4, advanced-cluster-security/rhacs-scanner-rhel8 3.72.0-3, advanced-cluster-security/rhacs-rhel8-operator 3.72.0-3, advanced-cluster-security/rhacs-scanner-slim-rhel8 3.72.0-3
    fixed: vendor fix RHSA-2022:6714
  • Red Hat RHODF 4.11 for RHEL 8 odf4/odf-topolvm-rhel8 v4.11.0-24, odf4/rook-ceph-rhel8-operator v4.11.0-49, odf4/odf-csi-addons-sidecar-rhel8 v4.11.0-23
    fixed: vendor fix RHSA-2022:6156
  • Red Hat Service Telemetry Framework 1.5 for RHEL 8 stf/sg-core-rhel8 5.1.1-2
    fixed: vendor fix RHSA-2023:1529
  • Red Hat CNV 4.12 for RHEL 8 container-native-virtualization/virt-api v4.12.0-255, container-native-virtualization/virtio-win v4.12.0-10, container-native-virtualization/kubemacpool v4.12.0-24, container-native-virtualization/bridge-marker v4.12.0-24, container-native-virtualization/virt-handler v4.12.0-255, container-native-virtualization/ovs-cni-marker v4.12.0-24, +36 more Red Hat OpenShift Service Mesh 2.1 servicemesh-proxy, servicemesh-proxy-wasm, servicemesh 2.1.5-1.el8, servicemesh-cni 2.1.5-1.el8, servicemesh-proxy 2.1.5-1.el8, servicemesh-ratelimit 2.1.5-1.el8, +3 more Red Hat OSSO 1.0 for RHEL 8 openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle v1.0-24 Red Hat Ceph Storage 6.1 Tools rhceph/rhceph-6-rhel9 6-177, rhceph/keepalived-rhel9 2.2.4-3, rhceph/snmp-notifier-rhel9 1.2.1-36, rhceph/rhceph-haproxy-rhel9 2.4.17-4, rhceph/rhceph-promtail-rhel9 v2.4.0-5 Red Hat Enterprise Linux 7 golang, golang-bin, golang-src, golang-misc, golang-tests Red Hat Migration Toolkit 1.7 rhmtc/openshift-migration-ui-rhel8 v1.7.3-5, rhmtc/openshift-velero-plugin-rhel8 v1.7.3-4, rhmtc/openshift-migration-velero-rhel8 v1.7.3-4, rhmtc/openshift-migration-openvpn-rhel8 v1.7.3-4, rhmtc/openshift-migration-registry-rhel8 v1.7.3-4, rhmtc/openshift-migration-rhel8-operator v1.7.3-5, +9 more
    +4 more products
    Red Hat OpenShift Container Platform 4.10 cri-tools 1.23.0-1.1.el7, cri-tools 1.23.0-1.1.el8, openstack-ironic 19.0.1-0.20220712154507.f14c488.el8, openstack-ironic-api 19.0.1-0.20220712154507.f14c488.el8, python3-ironic-tests 19.0.1-0.20220712154507.f14c488.el8, openstack-ironic-common 19.0.1-0.20220712154507.f14c488.el8, +10 more Red Hat RHACS 3.72 for RHEL 8 advanced-cluster-security/rhacs-collector-rhel8 3.72.0-3, advanced-cluster-security/rhacs-operator-bundle 3.72.0-3, advanced-cluster-security/rhacs-scanner-db-rhel8 3.72.0-3, advanced-cluster-security/rhacs-collector-slim-rhel8 3.72.0-2, advanced-cluster-security/rhacs-scanner-db-slim-rhel8 3.72.0-2 Red Hat RHODF 4.11 for RHEL 8 odf4/cephcsi-rhel8 v4.11.0-45, odf4/mcg-core-rhel8 v4.11.0-30, odf4/odf-console-rhel8 v4.11.0-51, odf4/mcg-rhel8-operator v4.11.0-28, odf4/ocs-rhel8-operator v4.11.0-67, odf4/odf-rhel8-operator v4.11.0-27, +17 more Red Hat Service Telemetry Framework 1.5 for RHEL 8 stf/sg-bridge-rhel8 1.5.0-12, stf/smart-gateway-rhel8-operator 5.0.1-3, stf/prometheus-webhook-snmp-rhel8 1.5.2-2, stf/service-telemetry-rhel8-operator 1.5.1-2, stf/smart-gateway-operator-bundle 5.0.1678301890-1, stf/service-telemetry-operator-bundle 1.5.1678301890-1
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

2.95% chance of exploitation in the next 30 days, higher than 87% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/golang/go/issues/52313 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
GitHub 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N
OSV 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected packages

ecosystem package affected fixed in
go golang.org/x/sys
<0.0.0-20220412211240-33da011f77ad
0.0.0-20220412211240-33da011f77ad
bitnami golang
<1.17.10
>=1.18.0, <1.18.2
1.17.10
1.18.2
go stdlib
<1.17.10
>=1.18.0-0, <1.18.2
1.17.10
1.18.2

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.