High
onednn — security advisory
Uncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Products
- onednn
- Affected versions
- 2.0+ds-2, 2.2.4+ds-2, 2.7.4-1ubuntu1, 2.7.4-2, 3.1.1-2, 3.12.1+ds-3, 3.7.1+ds-1, 3.7.2+ds-2, 3.8.1+ds-1, 3.9.1+ds-2
- Fixed versions
- Not specified
- CVEs
- CVE-2022-26076
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:46 UTC · Revision 1
Source evidence
Uncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
osv:UBUNTU-CVE-2022-26076
onednn
Fixed versions: Not specified
onednn
Fixed versions: Not specified
onednn
Fixed versions: Not specified
onednn
Fixed versions: Not specified
onednn
Fixed versions: Not specified
Complete source record
{
"id": "cb3f431fd5dce703eba69a9936f79ef0403244344cf69e866558fa1b4ab624ec",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-26076",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2022-26076",
"summary": "Uncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.",
"evidence": "osv:UBUNTU-CVE-2022-26076",
"products": [
{
"name": {
"value": "onednn",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0+ds-2",
"evidence": "/affected/0/versions"
},
{
"value": "2.2.4+ds-2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "onednn",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.4-1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "2.7.4-2",
"evidence": "/affected/1/versions"
},
{
"value": "3.1.1-2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "onednn",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.7.1+ds-1",
"evidence": "/affected/2/versions"
},
{
"value": "3.7.2+ds-2",
"evidence": "/affected/2/versions"
},
{
"value": "3.8.1+ds-1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "onednn",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.9.1+ds-2",
"evidence": "/affected/3/versions"
},
{
"value": "3.12.1+ds-3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "onednn",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.8.1+ds-1",
"evidence": "/affected/4/versions"
},
{
"value": "3.9.1+ds-2",
"evidence": "/affected/4/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2022-26076",
"aliases": [
"UBUNTU-CVE-2022-26076"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "onednn",
"purl": "pkg:deb/ubuntu/onednn?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.0+ds-2",
"2.2.4+ds-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-26076.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libdnnl2",
"binary_version": "2.2.4+ds-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "onednn",
"purl": "pkg:deb/ubuntu/onednn?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.7.4-1ubuntu1",
"2.7.4-2",
"3.1.1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-26076.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libdnnl3",
"binary_version": "3.1.1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "onednn",
"purl": "pkg:deb/ubuntu/onednn?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"3.7.1+ds-1",
"3.7.2+ds-2",
"3.8.1+ds-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-26076.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libdnnl3.6",
"binary_version": "3.8.1+ds-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "onednn",
"purl": "pkg:deb/ubuntu/onednn?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"3.9.1+ds-2",
"3.12.1+ds-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-26076.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libdnnl3.6",
"binary_version": "3.12.1+ds-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "onednn",
"purl": "pkg:deb/ubuntu/onednn?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.8.1+ds-1",
"3.9.1+ds-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-26076.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libdnnl3.6",
"binary_version": "3.9.1+ds-2"
}
]
}
}
],
"modified": "2026-10-17T12:56:02.471479493Z",
"provider": "osv",
"upstream": [
"CVE-2022-26076"
],
"references": [
"https://ubuntu.com/security/CVE-2022-26076",
"https://www.cve.org/CVERecord?id=CVE-2022-26076"
]
},
"related_cves": [
{
"value": "CVE-2022-26076",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/1/score"
},
"source_id": "core-osv",
"document_id": 354657,
"published_at": "2023-02-16T20:15:00+00:00"
}