PT-2022-2030 · Linux+5 · Linux Kernel+5
David Bouman
·
Published
2013-12-03
·
Updated
2026-04-05
·
CVE-2022-1015
CVSS v3.1
6.6
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw was found in the Linux kernel in the netfilter subsystem, specifically in the linux/net/netfilter/nf tables api.c file. This issue allows a local user to cause an out-of-bounds write problem. The vulnerability is related to the nf tables module and can be exploited to elevate privileges using unshare(CLONE NEWUSER) or unshare(CLONE NEWNET) calls. The exploit can construct a filter that depends on the value of a kernel address on the stack, leaking the KASLR offset by observing side-effects, and then build a ROP chain to gain root privileges.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Validation of Array Index
Memory Corruption
Access of Uninitialized Pointer
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu