CVE-2022-2588

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

5.87% chance of exploitation in the next 30 days, 93th percentile

Published

2024-01-08

Updated

2025-05-22

Proof-of-concept exploits (8)

• BassamGraini/CVE-2022-258812★ · 2022-12-16
• Igr1s-red/CVE-2022-25880★ · 2025-06-25
• Markakd/CVE-2022-2588487★ · 2023-03-04
• dom4570/CVE-2022-25880★ · 2023-03-09
• veritas501/CVE-2022-258811★ · 2023-08-22
• LSinus/CacheMeIfYouCan
• cleverg0d/CVEs
• peiwithhao/Hacker-University-of-peiwithhao

References

• CVE Record
• NVD entry

Related

• CVE-2021-3715
• CVE-2021-4154
• CVE-2022-20409
• CVE-2021-22555
• CVE-2022-0185
• CVE-2022-0847