CVE-2022-31250
Fixed in a distro release EPSS <1%CVSS 7.1
A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root. This issue affects: openSUSE Tumbleweed keylime versions prior to 6.4.2-1.1.
Products: opensuse tumbleweed
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | keylime | 6.3.2-150400.4.11.1 |
| openSUSE Leap 15.4 | keylime | 6.3.2-150400.4.11.1 |