PT-2022-4286 · Linux+10 · Linux Kernel+10

Basantsingh007 + 1 · Published 2022-08-09 · Updated 2026-02-23 · CVE-2022-2586

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the Linux kernel's netfilter subsystem. This vulnerability can be exploited to allow an attacker to elevate their privileges and execute arbitrary code. The problem arises from a nft object or expression referencing a nft set on a different nft table, leading to a use-after-free once that table is deleted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2022:7444

ALSA-2022:7683

ALSA-2022:7933

ALSA-2022:8267

ALSA-2024_2394

ALSA-2025_1067

ALSA-2025_1068

ALSA-2025_11850

ALSA-2025_11851

ALSA-2025_11861

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_14438

ALSA-2025_15008

ALSA-2025_15009

ALSA-2025_15011

ALSA-2025_15471

ALSA-2025_15472

ALSA-2025_15785

ALSA-2025_15786

ALSA-2025_16372

ALSA-2025_16373

ALSA-2025_16398

ALSA-2025_16880

ALSA-2025_16919

ALSA-2025_16920

ALSA-2025_17797

ALSA-2025_17812

ALSA-2025_18281

ALSA-2025_19102

ALSA-2025_19103

ALSA-2025_19409

ALSA-2025_20518

ALSA-2025_2473

ALSA-2025_2474

ALSA-2025_2627

ALT-PU-2022-2512

AZL-33260

BDU:2022-05140

CESA-2022_7444

CESA-2022_7683

CVE-2022-2586

DLA-3102-1

DLA-3131-1

DSA-5207-1

ELSA-2022-7683

ELSA-2022-8267

ELSA-2022-9827

ELSA-2022-9828

ELSA-2022-9829

ELSA-2022-9830

LSN-0089-1

MGASA-2022-0305

MGASA-2022-0308

OESA-2022-1880

OESA-2022-1881

OESA-2022-1910

OPENSUSE-SU-2022_3585-1

OPENSUSE-SU-2022_3609-1

OPENSUSE-SU-2022_3775-1

OPENSUSE-SU-2022_3844-1

OPENSUSE-SU-2022_4617-1

RHSA-2022:7444

RHSA-2022:7683

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022_7444

RHSA-2022_7683

RHSA-2022_7933

RHSA-2022_8267

RHSA-2024:0724

RLSA-2022:7444

RLSA-2022:7683

RLSA-2022_7444

RLSA-2022_7683

SUSE-SU-2022:3585-1

SUSE-SU-2022:3609-1

SUSE-SU-2022:3704-1

SUSE-SU-2022:3775-1

SUSE-SU-2022:3809-1

SUSE-SU-2022:3844-1

SUSE-SU-2022:4617-1

SUSE-SU-2024:0113-1

SUSE-SU-2024:0117-1

SUSE-SU-2024:0118-1

SUSE-SU-2024:0120-1

SUSE-SU-2024_0113-1

SUSE-SU-2024_0117-1

SUSE-SU-2024_0118-1

SUSE-SU-2024_0120-1

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02334-1

SUSE-SU-2025_02537-1

USN-5557-1

USN-5560-1

USN-5560-2

USN-5562-1

USN-5564-1

USN-5565-1

USN-5566-1

USN-5567-1

USN-5582-1

ZDI-22-1118

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 1505

• 🔥 https://github.com/aels/CVE-2022-2586-LPE · Exploit
• 🔥 https://github.com/sniper404ghostxploit/CVE-2022-2586 · Exploit
• 🔥 https://vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2022:3704-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1972 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1729 · Security Note
• https://ubuntu.com/security/notices/USN-5560-1 · Vendor Advisory
• https://lore.kernel.org/netfilter-devel/[e-mail]/T/#t · Patch
• https://linux.oracle.com/errata/ELSA-2022-9828.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1652 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0494 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29581 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5582-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3585-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory