CVE-2022-32250High· 7.8▾ MidnightPoC availablenet/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.6 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.9%
7 GitHub repos (last check)
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
linux_kernel >= 4.1, < 4.9.318linux_kernel >= 4.10, < 4.14.283linux_kernel >= 4.15, < 4.19.247linux_kernel >= 4.20, < 5.4.198linux_kernel >= 5.5, < 5.10.120linux_kernel >= 5.11, < 5.15.45linux_kernel >= 5.16, < 5.17.13linux_kernel >= 5.18, < 5.18.2fedora = 35fedora = 36debian_linux = 9.0debian_linux = 10.0h300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwareh410c_firmwareUpgrade past the affected range:
linux_kernel 5.18.2Connected by shared product, vendor, weakness, or advisory.
CVE-2022-1734High· 7.0A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.
CVE-2022-32296Low· 3.3The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used
CVE-2022-1679High· 7.8A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages
CVE-2022-26490High· 7.8st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.
CVE-2022-1353High· 7.1A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel
CVE-2022-3625Medium· 4.6A vulnerability was found in Linux Kernel