Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-0358

26
FAUCET Score

CVE-2022-0358 is a high-severity flaw in QEMU's virtio-fs shared file system daemon, affecting QEMU and Red Hat Enterprise Linux. It allows a local guest user to create files with unintended group ownership in SGID directories, potentially leading to privilege escalation within the guest and on the host. With a CVSS score of 7.8, this vulnerability has a low attack complexity and can result in high impact to confidentiality, integrity, and availability. Currently, there is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 6.2.0-7CPE matchmatch criteria
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.33%
Probability of exploitation in next 30 days
EPSS Percentile
24.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0032 is in the 63rd percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (25)

microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 6.2.0-5
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 6.2.0-5
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.2.0-18
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.2.0-18
microsoftpatch availablevia msrc
Product: 18533-16820Fixed in: 4.2.0-48
microsoftpatch availablevia msrc
Product: 18635-16823Fixed in: 6.2.0-5
microsoftpatch availablevia msrc
Product: 18535-17084Fixed in: 6.2.0-18
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 4.2.0-48
microsoftpatch availablevia msrc
Product: azl3 qemu 6.2.0-18 on Azure Linux 3.0Fixed in: 6.2.0-18
microsoftpatch availablevia msrc
Product: cbl2 qemu 6.2.0-5 on CBL Mariner 2.0Fixed in: 6.2.0-5
microsoftpatch availablevia msrc
Product: cm1 qemu-kvm 4.2.0-48 on CBL Mariner 1.0Fixed in: 4.2.0-48
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 4.2.0-48
redhatpatch availablevia redhat_api
Product: Advanced Virtualization for RHEL 8.4.0.EUSFixed in: virt:av-8040020220210233846.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Advanced Virtualization for RHEL 8.2.1Fixed in: virt:8.2-8020120220211042301.863bb0db
View patch
redhatpatch availablevia redhat_api
Product: Advanced Virtualization for RHEL 8.2.1Fixed in: virt-devel:8.2-8020120220211042301.863bb0db
View patch
redhatpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Advanced Virtualization for RHEL 8.4.0.EUSFixed in: virt-devel:av-8040020220210233846.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Advanced Virtualization for RHEL 8.5.0.ZFixed in: virt:av-8050020220210180726.c5368500
View patch
redhatpatch availablevia redhat_api
Product: Advanced Virtualization for RHEL 8.5.0.ZFixed in: virt-devel:av-8050020220210180726.c5368500
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: virt-devel:rhel-8050020220208234339.c5368500
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: virt:rhel-8050020220208234339.c5368500
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: virt-devel:rhel-8040020220214155039.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: virt:rhel-8040020220214155039.522a0ee4
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8 Advanced VirtualizationFixed in: virt:av/qemu-kvm
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8 Advanced VirtualizationFixed in: virt:8.2/qemu-kvm

Vendor Advisories (3)

microsoft2024-Sep/CVE-2022-0358

CVE-2022-0358

Sep 10, 2024
microsoft2022-Aug/CVE-2022-0358Important

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

Aug 9, 2022
redhatCVE-2022-0358Moderate

QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405

Jan 25, 2022

References

access.redhat.com / security/cve/CVE-2022-0358
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingPatchThird Party Advisory
gitlab.com / qemu-project/qemu/-/commit/449e8171f96a6a944d1f3b7d3627ae059eae21ca
PatchThird Party Advisory
security.netapp.com / advisory/ntap-20221007-0008
Third Party Advisory