Not rated
CVE-2022-32250 net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net…
Description
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| n/a | Versions not published | |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1 | 1.1 |
References
- www.openwall.com www.openwall.com
- git.kernel.org git.kernel.org
- [oss-security] 20220603 Re: Linux Kernel use-after-free write in netfilter www.openwall.com
- [oss-security] 20220604 Re: Linux Kernel use-after-free write in netfilter www.openwall.com
- lists.fedoraproject.org lists.fedoraproject.org
- lists.fedoraproject.org lists.fedoraproject.org
- www.debian.org www.debian.org
- bugzilla.redhat.com bugzilla.redhat.com
- [oss-security] 20220620 Re: Linux Kernel use-after-free write in netfilter www.openwall.com
- [debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update lists.debian.org
- [oss-security] 20220703 Re: Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250? www.openwall.com
- [oss-security] 20220703 Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250? www.openwall.com
- DSA-5173 www.debian.org
- security.netapp.com security.netapp.com
- [oss-security] 20220825 Re: Linux Kernel use-after-free write in netfilter www.openwall.com
- blog.theori.io blog.theori.io
- github.com github.com
- [oss-security] 20220902 Re: Linux Kernel use-after-free write in netfilter www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated