VULNERABILITY INTELLIGENCE
CVE-2022-32250
CVSS score7.8 HIGH
EPSS probability2.91%
CISA KEVNot currently listed
Published2022-06-02
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
Weakness classification
- nvd@nist.gov: CWE-416
Primary references
- cve@mitre.org — Exploit, Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Issue Tracking, Third Party Advisory
- cve@mitre.org — Mailing List, Patch, Vendor Advisory
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory