CVE-2022-2586

The Linux Kernel Organization linux, linux_kernel

Published 8 Jan 2024 · updated 20 Aug 2026 · Analyzed

7.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 26 Jun 2024, with a remediation deadline of 17 Jul 2024 for US federal agencies.

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Description

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586 · Third Party Advisory
lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t · Mailing List, Patch
ubuntu.com/security/notices/USN-5557-1 · Third Party Advisory
ubuntu.com/security/notices/USN-5560-1 · Third Party Advisory
ubuntu.com/security/notices/USN-5560-2 · Third Party Advisory
ubuntu.com/security/notices/USN-5562-1 · Third Party Advisory
ubuntu.com/security/notices/USN-5564-1 · Third Party Advisory
ubuntu.com/security/notices/USN-5565-1 · Third Party Advisory
ubuntu.com/security/notices/USN-5566-1 · Third Party Advisory
ubuntu.com/security/notices/USN-5567-1 · Third Party Advisory
ubuntu.com/security/notices/USN-5582-1 · Third Party Advisory
www.openwall.com/lists/oss-security/2022/08/09/5 · Mailing List
www.zerodayinitiative.com/advisories/ZDI-22-1118/ · Third Party Advisory, VDB Entry
www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586 · Exploit, Third Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586 · US Government Resource