CVE-2022-2586
KEVHIGH 7.8EPSS 10.2%
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
- Affected
- The Linux Kernel Organization · linux
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 UBUNTU
- 5.3 MEDIUM
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H - EPSS
- 10.20% chance of exploitation in the next 30 days, 96th percentile
- CISA KEV
- added 2024-06-26
- Published
- 2024-01-08
- Updated
- 2026-10-14
Proof-of-concept exploits (8)
- https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-…
- Trickhish/automated_privilege_escalation1★ · 2024-01-20
- aels/CVE-2022-2586-LPE21★ · 2022-09-03
- greek0x0/2022-LPE-UAF9★ · 2022-09-01
- konoha279/2022-LPE-UAF5★ · 2022-08-23
- pirenga/2022-LPE-UAF6★ · 2022-08-23
- sniper404ghostxploit/CVE-2022-25862★ · 2022-11-06
- lanleft/CVE-2022-25860★ · 2023-06-15
Security advisories
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
- https://ubuntu.com/security/notices/USN-5557-1
- https://ubuntu.com/security/notices/USN-5560-1
- https://ubuntu.com/security/notices/USN-5560-2
- https://ubuntu.com/security/notices/USN-5562-1
- https://ubuntu.com/security/notices/USN-5564-1
- https://ubuntu.com/security/notices/USN-5565-1
- https://ubuntu.com/security/notices/USN-5566-1
- https://ubuntu.com/security/notices/USN-5567-1
- https://ubuntu.com/security/notices/USN-5582-1
- https://www.zerodayinitiative.com/advisories/ZDI-22-1118
- https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/…