← Vulnerability feed

Vulnerability record · CVE-2022-38014 · published 9 November 2022

CVE-2022-38014: Microsoft azure iot edge for linux race condition vulnerability

Microsoft · Azure Iot Edge For Linux

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

7.0 CVSS 3.1 High EPSS 0.34% · top 74.7% CWE-362 · Race condition
7.0CVSS 3.1 base score
0.34%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
10 Aug 2026Last modified by NVD

Description

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38014
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38014

Track CVE-2022-38014 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-43907Microsoft windows subsystem for linux vulnerabilityVisual Studio Code WSL Extension Remote Code Execution VulnerabilityEPSS 3.8%8.8CVE-2025-62220Microsoft windows subsystem for linux heap-based buffer overflow vulnerabilityHeap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.EPSS 0.67%7.8CVE-2026-57968Microsoft windows subsystem for linux vulnerabilityBuffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.EPSS 0.33%7.8CVE-2022-44689Microsoft windows subsystem for linux improper privilege management vulnerabilityWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityEPSS 0.49%7.0CVE-2025-53788Microsoft windows subsystem for linux toctou race condition vulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.EPSS 0.23%4.7CVE-2026-57973Microsoft windows subsystem for linux toctou race condition vulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.EPSS 0.22%5.5CVE-2025-39964Linux kernel af_alg race condition allows concurrent socket writesThe Linux kernel's af_alg crypto socket implementation did not prevent two concurrent writes to the same socket, allowing data to be interleaved unpr…KEVEPSS 1.00%analysed7.0CVE-2025-62215Windows Kernel race condition and double free privilege escalationA race condition combined with a double free in the Windows Kernel lets a locally authenticated attacker corrupt kernel memory and elevate privileges…KEVEPSS 6.0%analysed

Source: NIST National Vulnerability Database (record CVE-2022-38014), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.