CVE-2022-2586
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - security@ubuntu.com
- Published
- 2024-01-08
- Last modified
- 2026-10-14
- Known exploited (CISA KEV)
- since 2024-06-26, action due 2024-07-17: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- Weaknesses
- CWE-416
Affected products
- Ubuntu Linux (Canonical)
- Linux Kernel (Linux)
- Simatic S7-1500 Tm Mfp - Gnulinux Subsystem (Siemens)
- Simatic S7-1500 Tm Mfp Firmware (Siemens)
- Sinec Os (Siemens)
- Linux (The Linux Kernel Organization)
References
- https://ubuntu.com/security/notices/USN-5564-1
- https://ubuntu.com/security/notices/USN-5560-2
- https://ubuntu.com/security/notices/USN-5582-1
- https://ubuntu.com/security/notices/USN-5567-1
- https://ubuntu.com/security/notices/USN-5560-1
- https://ubuntu.com/security/notices/USN-5566-1
- https://www.openwall.com/lists/oss-security/2022/08/09/5
- https://ubuntu.com/security/notices/USN-5565-1
- https://www.zerodayinitiative.com/advisories/ZDI-22-1118/
- https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t
- https://ubuntu.com/security/notices/USN-5562-1
- https://ubuntu.com/security/notices/USN-5557-1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586
- https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html
