CVE catalog

CVE-2022-31252

Security update for permissions

[CVE catalog]

Severity
Medium · CVSS 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.15% · Oct 25, 2026

This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths (bsc#1203018).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susepermissionslinux enterprise module for basesystem 15 sp420201225-150400.5.11.1fixed
Opensusepermissionsleap 15.420201225-150400.5.11.1fixed
Opensusepermissionstumbleweed1599_20220912-1.1fixed
Opensusepermissionsleap 15.320200127-lp153.24.12.1fixed
Susepermissionslinux enterprise module for basesystem 15 sp320181225-150200.23.15.1fixed
Susepermissionslinux enterprise micro 5.120181225-150200.23.15.1fixed
Susepermissionslinux enterprise micro 5.220181225-150200.23.15.1fixed
Opensusepermissionsleap micro 5.220181225-150200.23.15.1fixed
Opensusepermissionsleap 15.320181225-150200.23.15.1fixed
Susepermissionslinux enterprise server 12 sp520170707-6.10.1fixed
Susepermissionslinux enterprise server for sap applications 12 sp520170707-6.10.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susepermissionsrpmlinux enterprise module for basesystem 15 sp420201225-150400.5.11.1Not reportedSUSE-SU-2022:3353-1Not reported
Opensusepermissionsrpmleap 15.420201225-150400.5.11.1Not reportedSUSE-SU-2022:3353-1Not reported
Opensusepermissionsrpmtumbleweed1599_20220912-1.1Not reportedOPENSUSE-SU-2024:12335-1Not reported
Opensusepermissionsrpmleap 15.320200127-lp153.24.12.1Not reportedOPENSUSE-SU-2022:10128-1Not reported
Susepermissionsrpmlinux enterprise module for basesystem 15 sp320181225-150200.23.15.1Not reportedSUSE-SU-2022:3394-1Not reported
Susepermissionsrpmlinux enterprise micro 5.120181225-150200.23.15.1Not reportedSUSE-SU-2022:3394-1Not reported
Susepermissionsrpmlinux enterprise micro 5.220181225-150200.23.15.1Not reportedSUSE-SU-2022:3394-1Not reported
Opensusepermissionsrpmleap micro 5.220181225-150200.23.15.1Not reportedSUSE-SU-2022:3394-1Not reported
Opensusepermissionsrpmleap 15.320181225-150200.23.15.1Not reportedSUSE-SU-2022:3394-1Not reported
Susepermissionsrpmlinux enterprise server 12 sp520170707-6.10.1Not reportedSUSE-SU-2022:3382-1Not reported
Susepermissionsrpmlinux enterprise server for sap applications 12 sp520170707-6.10.1Not reportedSUSE-SU-2022:3382-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [permctl]Unknown

    Source package: [permissions]

    Details (1)

    • 1699_20260806-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1599_20220912-1.1

      Version impact unknown

      pypi · permissions · opensuse · tumbleweed

  • [permissions-config]Unknown

    Source package: [permissions]

    Details (1)

    • 1699_20260806-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1599_20220912-1.1

      Version impact unknown

      pypi · permissions · opensuse · tumbleweed

  • [permissions-zypp-plugin]Unknown

    Source package: [permissions]

    Details (1)

    • 1699_20260806-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1599_20220912-1.1

      Version impact unknown

      pypi · permissions · opensuse · tumbleweed

  • [permissions]Fixed

    Source package: [permissions]

    Details (1)

    • 1699_20260806-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1599_20220912-1.1

      pypi · permissions · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]