PT-2022-1733 · Linux+10 · Linux Kernel+10
Matthias Kaiser
·
Published
2020-05-06
·
Updated
2025-09-29
·
CVE-2022-25636
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 5.4 through 5.6.10
Description
The issue is related to a heap out-of-bounds write in the netfilter subsystem of the Linux kernel, specifically in the
nf dup netdev.c file. This can allow local users to gain privileges or cause a denial of service. The problem is related to nf tables offload. A researcher managed to hijack the kernel control flow, and an example exploit allows a local user to elevate their privileges in Ubuntu 21.10 with the KASLR protection mechanism disabled.Recommendations
For Linux kernel versions 5.4 through 5.6.10, consider applying the available patch to fix the issue. As a temporary workaround, restrict access to the vulnerable
nf tables offload functionality to minimize the risk of exploitation.Exploit
Fix
Memory Corruption
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu