CVE-2022-2588
HIGH 7.8EPSS 5.9%
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
- Affected
- The Linux Kernel Organization · linux
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 UBUNTU
- 5.3 MEDIUM
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H - EPSS
- 5.87% chance of exploitation in the next 30 days, 93rd percentile
- Published
- 2024-01-08
- Updated
- 2026-10-14
Proof-of-concept exploits (8)
- BassamGraini/CVE-2022-258812★ · 2022-12-16
- Igr1s-red/CVE-2022-25880★ · 2025-06-25
- Markakd/CVE-2022-2588488★ · 2023-03-04
- dom4570/CVE-2022-25880★ · 2023-03-09
- veritas501/CVE-2022-258811★ · 2023-08-22
- LSinus/CacheMeIfYouCan2★ · 2026-08-29
- cleverg0d/CVEs2★ · 2025-09-25
- peiwithhao/Hacker-University-of-peiwithhao4★ · 2025-11-04
Security advisories
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588
- https://ubuntu.com/security/notices/USN-5557-1
- https://ubuntu.com/security/notices/USN-5560-1
- https://ubuntu.com/security/notices/USN-5560-2
- https://ubuntu.com/security/notices/USN-5562-1
- https://ubuntu.com/security/notices/USN-5564-1
- https://ubuntu.com/security/notices/USN-5565-1
- https://ubuntu.com/security/notices/USN-5566-1
- https://ubuntu.com/security/notices/USN-5567-1
- https://ubuntu.com/security/notices/USN-5582-1
- https://ubuntu.com/security/notices/USN-5588-1
- https://www.zerodayinitiative.com/advisories/ZDI-22-1117
- https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u