Description
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High
Affected products
- Canonical / Ubuntu Linux14.04 – 14.04
- Canonical / Ubuntu Linux16.04 – 16.04
- Canonical / Ubuntu Linux18.04 – 18.04
- Canonical / Ubuntu Linux20.04 – 20.04
- Canonical / Ubuntu Linux22.04 – 22.04
- Linux / Linux kernel3.16 – 4.14.316
- Siemens / simatic_s7-1500_tm_mfp_firmware1.1
- Siemens / sinec_os2.4
- The Linux Kernel Organization / linux4.15 – 4.19.256
- The Linux Kernel Organization / linux3.16 – 4.14.316
- The Linux Kernel Organization / linux0 – 6.0~rc1
- The Linux Kernel Organization / linux4.20 – 5.4.211
- The Linux Kernel Organization / linux5.5 – 5.10.137
- The Linux Kernel Organization / linux5.11 – 5.15.61
- The Linux Kernel Organization / linux5.16 – 5.18.18
- The Linux Kernel Organization / linux5.19 – 5.19.2
References
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5564-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5560-2
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5582-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5567-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5560-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5566-1
- MAILING_LISThttps://www.openwall.com/lists/oss-security/2022/08/09/5
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5565-1
- VENDOR_ADVISORYhttps://www.zerodayinitiative.com/advisories/ZDI-22-1118/
- MISChttps://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5562-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5557-1
- CONFIRMhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
Updated 15m ago · 8 sources