CVE-2022-2586
MEDIUM KEVNFT - Use After Free
Title source: llmDescription
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
Exploits (4)
nomisec
WORKING POC
3 stars
by sniper404ghostxploit · local
https://github.com/sniper404ghostxploit/CVE-2022-2586
References (15)
Scores
CVSS v3
5.3
EPSS
0.0222
EPSS Percentile
84.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Details
CISA KEV
2024-06-26
VulnCheck KEV
2024-06-19
InTheWild.io
2024-06-22
ENISA EUVD
EUVD-2022-34835
CWE
CWE-416
Status
published
Products (7)
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
18.04
canonical/ubuntu_linux
20.04
canonical/ubuntu_linux
22.04
linux/linux_kernel
6.0
linux/linux_kernel
< 5.19.17
Published
Jan 08, 2024
KEV Added
Jun 26, 2024
Tracked Since
Feb 18, 2026