CVE-2022-2586
MEDIUMCVSS 5.3Known ExploitedCISA Known Exploited Vulnerability
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131; https://nvd.nist.gov/vuln/detail/CVE-2022-2586
Remediation deadline: July 17, 2024
Description
Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.
Timeline
Published:January 8th, 2024 6:15 PM
Last modified:October 14th, 2026 6:25 PM
Added to KEV:June 26th, 2024
CVSS Scoring
CVSS v3: 5.3 (MEDIUM)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Affected Software
From NVD CPE configuration data
Vendors
siemenslinuxcanonical
Products
simatic_s7-1500_tm_mfp_firmwaresinec_oslinux_kernelubuntu_linux
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586Third Party Advisory
- https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#tMailing List
- https://ubuntu.com/security/notices/USN-5557-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-2Third Party Advisory
- https://ubuntu.com/security/notices/USN-5562-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5564-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5565-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5566-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5567-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5582-1Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/08/09/5Mailing List
- https://www.zerodayinitiative.com/advisories/ZDI-22-1118/Third Party Advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586Third Party Advisory
- https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#tMailing List
- https://ubuntu.com/security/notices/USN-5557-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-2Third Party Advisory
- https://ubuntu.com/security/notices/USN-5562-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5564-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5565-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5566-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5567-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5582-1Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/08/09/5Mailing List
- https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586Exploit
- https://www.zerodayinitiative.com/advisories/ZDI-22-1118/Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.htmlThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-806742.htmlThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586US Government Resource
Source: NIST NVD · Data may lag official sources by up to one minute