CVE-2022-50213
HIGHLinux Kernel Use-After-Free in nf_tables SET_ID Lookup
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow SET_ID to refer to another table When doing lookups for sets on the same batch by using its ID, a set from a different table can be used. Then, when the table is removed, a reference to the set may be kept after the set is freed, leading to a potential use-after-free. When looking for sets by ID, use the table that was used for the lookup by name, and only return sets belonging to that same table. This fixes CVE-2022-2586, also reported as ZDI-CAN-17470.
References (7)
Core 7
Core References
Scores
CVSS v3
7.8
EPSS
0.0019
EPSS Percentile
9.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (23)
linux/Kernel
3.16.0 - 4.19.256linux
linux/Kernel
4.20.0 - 5.4.211linux
linux/Kernel
5.11.0 - 5.15.61linux
linux/Kernel
5.16.0 - 5.18.18linux
linux/Kernel
5.19.0 - 5.19.2linux
linux/Kernel
5.5.0 - 5.10.137linux
Linux/Linux
< 3.16
Linux/Linux
3.16
Linux/Linux
4.19.256 - 4.19.*
Linux/Linux
5.10.137 - 5.10.*
... and 13 more
Published
Jun 18, 2025
Tracked Since
Feb 18, 2026