Linux Kernel Use-After-Free Vulnerability
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
What happened
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
CISA lists it as exploited, added 26 Jun 2024.
Does it affect you
Names Canonical Ubuntu. Enter the product and version you run to place it against the affected range the vendor published.
What to do
- Apply the vendor patch named in this advisory.
lore.kernel.org - Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
cisa.gov
CISA’s notes for this entry:
- This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: seclists.org/oss-sec/2022/q3/131
- nvd.nist.gov/vuln/detail/CVE-2022-2586
Affected, as published to NVD
- ubuntu
- Canonical Ubuntu: exactly 14.04
The record
- NVD status
- Analyzed
- Published
- 08 Jan 2024, last modified 14 Oct 2026 (NVD)
- Severity
- CVSS 3.1 base score 7.8, High — computed here from the vector; NVD states 7.8.
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-416 Use After Free (NVD; names by MITRE)
- Exploitation
- Listed in CISA’s Known Exploited Vulnerabilities catalogue since 26 Jun 2024; federal remediation due 17 Jul 2024. CISA entry
- Vendor
- Linux · Kernel (CISA)
References on the NVD record
- lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#tMailing ListPatch
- cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586Third Party Advisory
- ubuntu.com/security/notices/USN-5557-1Third Party Advisory
- ubuntu.com/security/notices/USN-5560-1Third Party Advisory
- ubuntu.com/security/notices/USN-5560-2Third Party Advisory
- ubuntu.com/security/notices/USN-5562-1Third Party Advisory
- ubuntu.com/security/notices/USN-5564-1Third Party Advisory
- ubuntu.com/security/notices/USN-5565-1Third Party Advisory
- ubuntu.com/security/notices/USN-5566-1Third Party Advisory
- ubuntu.com/security/notices/USN-5567-1Third Party Advisory
- ubuntu.com/security/notices/USN-5582-1Third Party Advisory
- zerodayinitiative.com/advisories/ZDI-22-1118/Third Party AdvisoryVDB Entry
- vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586ExploitThird Party Advisory
- cert-portal.siemens.com/productcert/html/ssa-794697.htmlThird Party Advisory
- cert-portal.siemens.com/productcert/html/ssa-806742.htmlThird Party Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586US Government Resource
- openwall.com/lists/oss-security/2022/08/09/5Mailing List
Sources
The verdict above is computed from the products and versions you entered and the affected ranges the vendor published to NVD. It does not inspect your environment, and this site never reports a product as unaffected: why.