PT-2022-2764 · Linux+8 · Linux Kernel+8
Edg Edg
·
Published
2022-05-26
·
Updated
2026-06-16
·
CVE-2022-32250
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.18.1
Description
The issue is related to an incorrect NFT STATEFUL EXPR check in the net/netfilter/nf tables api.c file, leading to a use-after-free condition. This allows a local user, who is able to create user/net namespaces, to escalate privileges to root. The vulnerability is associated with the Netfilter packet filtering software of the Linux kernel.
Recommendations
For Linux kernel versions through 5.18.1, consider disabling the
nft expr init function as a temporary workaround until a patch is available. Restrict access to the nf tables api.c module to minimize the risk of exploitation. Avoid using the NFT STATEFUL EXPR check in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse