CVE-2022-2586

MEDIUM KEV

NFT - Use After Free

Title source: llm

Description

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Exploits (4)

nomisec WORKING POC 20 stars
by aels · local
https://github.com/aels/CVE-2022-2586-LPE
nomisec WORKING POC 3 stars
by sniper404ghostxploit · local
https://github.com/sniper404ghostxploit/CVE-2022-2586
vulncheck_xdb WORKING POC
local
https://github.com/greek0x0/2022-LPE-UAF

Scores

CVSS v3 5.3
EPSS 0.0222
EPSS Percentile 84.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Details

CISA KEV 2024-06-26
VulnCheck KEV 2024-06-19
InTheWild.io 2024-06-22
ENISA EUVD EUVD-2022-34835
CWE
CWE-416
Status published
Products (7)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 20.04
canonical/ubuntu_linux 22.04
linux/linux_kernel 6.0
linux/linux_kernel < 5.19.17
Published Jan 08, 2024
KEV Added Jun 26, 2024
Tracked Since Feb 18, 2026