# CVE-2022-24921: delve: Go Toolset provides the Go programming language tools and libraries

CVE-2022-24921 is fixed in 24 products on 1 platform, first by DEBIAN-CVE-2022-24921, released March 5, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-24921
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0323
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 5, 2022

## Description

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.   Security Fix(es):  * golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)  * golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)  * golang: syscall: faccessat checks wrong group (CVE-2022-29526)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Bug Fix(es):  * Update to Go 1.17.10 (BZ#2091077)

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | delve RHEL 8 | 0:1.7.2-1.module+el8.6.0+12972+ebab5911 | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | delve ol 8 | 0:1.7.2-1.0.1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | delve rocky 8 | 0:1.7.2-1.module+el8.6.0+824+8e984c20 | [RLSA-2022:5337](https://patchblox.com/security/data/fix/linux/rlsa-2022-5337.md) | Jun 28, 2022 |
| Linux | go-toolset RHEL 8 | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | go-toolset RHEL 9 | 0:1.17.12-1.el9_0 | [RHSA-2022:5799](https://patchblox.com/security/data/fix/linux/rhsa-2022-5799.md) | Aug 1, 2022 |
| Linux | go-toolset ol 8 | 0:1.17.10-1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | go-toolset rocky 8 | 0:1.17.10-1.module+el8.6.0+986+efe4cea4 | [RLSA-2022:5337](https://patchblox.com/security/data/fix/linux/rlsa-2022-5337.md) | Jun 28, 2022 |
| Linux | go-toolset rocky 9 | 0:1.17.12-1.el9_0 | [RLSA-2022:5799](https://patchblox.com/security/data/fix/linux/rlsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang RHEL 8 | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | golang RHEL 9 | 0:1.17.12-1.el9_0 | [RHSA-2022:5799](https://patchblox.com/security/data/fix/linux/rhsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang amzn 2023 | 1.19.3-2.amzn2023.0.2 | [ALAS2023-2023-048](https://patchblox.com/security/data/fix/linux/alas2023-2023-048.md) | Feb 17, 2023 |
| Linux | golang ol 8 | 0:1.17.10-1.0.1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | golang rocky 8 | 0:1.17.10-1.module+el8.6.0+986+efe4cea4 | [RLSA-2022:5337](https://patchblox.com/security/data/fix/linux/rlsa-2022-5337.md) | Jun 28, 2022 |
| Linux | golang rocky 9 | 0:1.17.12-1.el9_0 | [RLSA-2022:5799](https://patchblox.com/security/data/fix/linux/rlsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang-1.15 Debian 11.6 (bullseye) | 1.15.15-1~deb11u4 | [DEBIAN-CVE-2022-24921](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24921.md) | Mar 5, 2022 |
| Linux | golang-bin RHEL 8 | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | golang-bin RHEL 9 | 0:1.17.12-1.el9_0 | [RHSA-2022:5799](https://patchblox.com/security/data/fix/linux/rhsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang-bin amzn 2023 | 1.19.3-2.amzn2023.0.2 | [ALAS2023-2023-048](https://patchblox.com/security/data/fix/linux/alas2023-2023-048.md) | Feb 17, 2023 |
| Linux | golang-bin ol 8 | 0:1.17.10-1.0.1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | golang-docs RHEL 8 | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | golang-docs RHEL 9 | 0:1.17.12-1.el9_0 | [RHSA-2022:5799](https://patchblox.com/security/data/fix/linux/rhsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang-docs amzn 2023 | 1.19.3-2.amzn2023.0.2 | [ALAS2023-2023-048](https://patchblox.com/security/data/fix/linux/alas2023-2023-048.md) | Feb 17, 2023 |
| Linux | golang-docs ol 8 | 0:1.17.10-1.0.1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | golang-misc RHEL 8 | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | golang-misc RHEL 9 | 0:1.17.12-1.el9_0 | [RHSA-2022:5799](https://patchblox.com/security/data/fix/linux/rhsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang-misc amzn 2023 | 1.19.3-2.amzn2023.0.2 | [ALAS2023-2023-048](https://patchblox.com/security/data/fix/linux/alas2023-2023-048.md) | Feb 17, 2023 |
| Linux | golang-misc ol 8 | 0:1.17.10-1.0.1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | golang-race RHEL 8 | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | golang-race RHEL 9 | 0:1.17.12-1.el9_0 | [RHSA-2022:5799](https://patchblox.com/security/data/fix/linux/rhsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang-race amzn 2023 | 1.19.3-2.amzn2023.0.2 | [ALAS2023-2023-048](https://patchblox.com/security/data/fix/linux/alas2023-2023-048.md) | Feb 17, 2023 |
| Linux | golang-race ol 8 | 0:1.17.10-1.0.1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | golang-shared amzn 2023 | 1.19.3-2.amzn2023.0.2 | [ALAS2023-2023-048](https://patchblox.com/security/data/fix/linux/alas2023-2023-048.md) | Feb 17, 2023 |
| Linux | golang-src RHEL 8 | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | golang-src RHEL 9 | 0:1.17.12-1.el9_0 | [RHSA-2022:5799](https://patchblox.com/security/data/fix/linux/rhsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang-src amzn 2023 | 1.19.3-2.amzn2023.0.2 | [ALAS2023-2023-048](https://patchblox.com/security/data/fix/linux/alas2023-2023-048.md) | Feb 17, 2023 |
| Linux | golang-src ol 8 | 0:1.17.10-1.0.1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | golang-tests RHEL 8 | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db | [RHSA-2022:5337](https://patchblox.com/security/data/fix/linux/rhsa-2022-5337.md) | Jun 30, 2022 |
| Linux | golang-tests RHEL 9 | 0:1.17.12-1.el9_0 | [RHSA-2022:5799](https://patchblox.com/security/data/fix/linux/rhsa-2022-5799.md) | Aug 1, 2022 |
| Linux | golang-tests amzn 2023 | 1.19.3-2.amzn2023.0.2 | [ALAS2023-2023-048](https://patchblox.com/security/data/fix/linux/alas2023-2023-048.md) | Feb 17, 2023 |
| Linux | golang-tests ol 8 | 0:1.17.10-1.0.1.module+el8.6.0+20677+d06d1f12 | [ELSA-2022-14844](https://patchblox.com/security/data/fix/linux/elsa-2022-14844.md) | Jun 8, 2022 |
| Linux | istio ol 8 | 0:1.12.6-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | istio-istioctl ol 8 | 0:1.12.6-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcne-agent ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcne-api-server ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcne-gluster-chart ol 8 | 0:1.4.3-1.el8 | [ELSA-2022-9362](https://patchblox.com/security/data/fix/linux/elsa-2022-9362.md) | May 9, 2022 |
| Linux | olcne-grafana-chart ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcne-istio-chart ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcne-nginx ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcne-oci-csi-chart ol 8 | 0:1.4.3-1.el8 | [ELSA-2022-9362](https://patchblox.com/security/data/fix/linux/elsa-2022-9362.md) | May 9, 2022 |
| Linux | olcne-olm-chart ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcne-prometheus-chart ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcne-utils ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |
| Linux | olcnectl ol 8 | 0:1.3.5-1.el8 | [ELSA-2022-9363](https://patchblox.com/security/data/fix/linux/elsa-2022-9363.md) | May 9, 2022 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.