VULNERABILITY INTELLIGENCE

CVE-2022-2586

CVSS score5.3 MEDIUM
EPSS probability10.20%
CISA KEVKnown exploited vulnerability
Published2024-01-08
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Known Exploited Vulnerability

Linux Kernel Use-After-Free Vulnerability

Vendor / product: Linux / Kernel

Description

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Weakness classification

  • security@ubuntu.com: CWE-416
  • nvd@nist.gov: CWE-416

Primary references