PT-2022-2031 · Linux+10 · Linux Kernel+10

David Bouman · Published 2013-12-03 · Updated 2025-04-16 · CVE-2022-1016

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the use of an uninitialized pointer nft do chain in the nf tables module of the Linux kernel's netfilter subsystem. This can cause a use-after-free condition, potentially leading to a kernel information leak problem. The issue can be exploited by a local, unprivileged attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Access of Uninitialized Pointer

Use After Free

Weakness Enumeration

CWE-909

CWE-824

CWE-416

Related Identifiers

ALSA-2022:7444

ALSA-2022:7683

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2013-1234

ALT-PU-2014-1422

ALT-PU-2022-1647

ALT-PU-2022-1730

ALT-PU-2022-1768

ALT-PU-2022-1816

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-10857

BDU:2022-01630

CESA-2022_7444

CESA-2022_7683

CVE-2022-1016

DLA-3065-1

DSA-5127-1

DSA-5173-1

MGASA-2022-0121

MGASA-2022-0122

OESA-2022-1621

OPENSUSE-SU-2022_1163-1

OPENSUSE-SU-2022_1183-1

OPENSUSE-SU-2022_1256-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

OPENSUSE-SU-2025_1195-1

OPENSUSE-SU-2025_1263-1

RHSA-2022:7444

RHSA-2022:7683

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022_7444

RHSA-2022_7683

RHSA-2022_7933

RHSA-2022_8267

RHSA-2023:4137

RHSA-2023:4138

RHSA-2024:0412

RLSA-2022:7444

RLSA-2022:7683

SUSE-SU-2022:1163-1

SUSE-SU-2022:1183-1

SUSE-SU-2022:1196-1

SUSE-SU-2022:1197-1

SUSE-SU-2022:1255-1

SUSE-SU-2022:1256-1

SUSE-SU-2022:1257-1

SUSE-SU-2022:1266-1

SUSE-SU-2022:1267-1

SUSE-SU-2022:1270-1

SUSE-SU-2022:1283-1

SUSE-SU-2022:1318-1

SUSE-SU-2022:1320-1

SUSE-SU-2022:1322-1

SUSE-SU-2022:1326-1

SUSE-SU-2022:1329-1

SUSE-SU-2022:1335-1

SUSE-SU-2022:1369-1

SUSE-SU-2022:1402-1

SUSE-SU-2022:1407-1

SUSE-SU-2022:1440-1

SUSE-SU-2022:1453-1

SUSE-SU-2022:1486-1

SUSE-SU-2022:2268-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

USN-5381-1

USN-5383-1

USN-5390-1

USN-5390-2

USN-5415-1

USN-5466-1

USN-6001-1

USN-6013-1

USN-6014-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2243

• 🔥 http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016 · Exploit
• 🔥 https://seclists.org/oss-sec/2022/q1/205 · Exploit
• https://osv.dev/vulnerability/DSA-5127-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1016 · Security Note
• https://bdu.fstec.ru/vul/2022-01630 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-1198 · Security Note
• https://ubuntu.com/security/CVE-2022-41218 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0407SE47MD · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-8267.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:7444 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3903 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5390-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-26545 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-7683.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2503 · Vendor Advisory