5.3
Moyenne
Exploitée
CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-416
Description
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| linux 5.19 | 5.19 → < 5.19.2 | 5.19.2 |
| linux 5.16 | 5.16 → < 5.18.18 | 5.18.18 |
| linux 5.11 | 5.11 → < 5.15.61 | 5.15.61 |
| linux 5.5 | 5.5 → < 5.10.137 | 5.10.137 |
| linux 4.20 | 4.20 → < 5.4.211 | 5.4.211 |
| linux 4.15 | 4.15 → < 4.19.256 | 4.19.256 |
| linux 3.16 | 3.16 → < 4.14.316 | 4.14.316 |
| linux_kernel 6.0 | premières → < 6.0-rc1 | 6.0-rc1 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1 | 1.1 |
Références
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- www.openwall.com www.openwall.com
- ubuntu.com ubuntu.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- lore.kernel.org lore.kernel.org
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- cve.mitre.org cve.mitre.org
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de linux
Les 7 CVE de linux →
CVE-2023-6040
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables:…
7.8
Élevée
CVE-2021-3600
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32…
7.8
Élevée
CVE-2023-1032
The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file…
4.7
Moyenne
CVE-2022-2602
io_uring UAF, Unix SCM garbage collection
5.3
Moyenne