CVE-2022-2588

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Score

CVSS 3.1 7.8 High

Status

Modified - security@ubuntu.com

Published

2024-01-08

Last modified

2026-10-14

Weaknesses

CWE-415, CWE-416

Affected products

• Ubuntu Linux (Canonical)
• Linux Kernel (Linux)
• Simatic S7-1500 Tm Mfp - Gnulinux Subsystem (Siemens)
• Linux (The Linux Kernel Organization)

References

• https://ubuntu.com/security/notices/USN-5565-1
• https://ubuntu.com/security/notices/USN-5562-1
• https://www.openwall.com/lists/oss-security/2022/08/09/6
• https://ubuntu.com/security/notices/USN-5582-1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588
• https://ubuntu.com/security/notices/USN-5564-1
• https://ubuntu.com/security/notices/USN-5566-1
• https://www.zerodayinitiative.com/advisories/ZDI-22-1117/
• https://ubuntu.com/security/notices/USN-5588-1
• https://ubuntu.com/security/notices/USN-5560-1
• https://github.com/Markakd/CVE-2022-2588
• https://ubuntu.com/security/notices/USN-5567-1
• https://ubuntu.com/security/notices/USN-5560-2
• https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u
• https://ubuntu.com/security/notices/USN-5557-1
• https://cert-portal.siemens.com/productcert/html/ssa-419740.html
• https://cert-portal.siemens.com/productcert/html/ssa-831302.html
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html
• https://cert-portal.siemens.com/productcert/html/ssa-769027.html