Description
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High
Affected products
- Canonical / Ubuntu Linux16.04 – 16.04
- Canonical / Ubuntu Linux20.04 – 20.04
- Canonical / Ubuntu Linux22.04 – 22.04
- Canonical / Ubuntu Linux14.04 – 14.04
- Canonical / Ubuntu Linux18.04 – 18.04
- Linux / Linux kernel4.9.326
- The Linux Kernel Organization / linux0 – 6.0~rc1
References
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5565-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5562-1
- MAILING_LISThttps://www.openwall.com/lists/oss-security/2022/08/09/6
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5582-1
- CONFIRMhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5564-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5566-1
- VENDOR_ADVISORYhttps://www.zerodayinitiative.com/advisories/ZDI-22-1117/
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5588-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5560-1
- MISChttps://github.com/Markakd/CVE-2022-2588
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5567-1
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5560-2
- MISChttps://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u
- VENDOR_ADVISORYhttps://ubuntu.com/security/notices/USN-5557-1
Updated 18m ago · 8 sources