An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-core | Oct 20, 2022 | Jul 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.10.118-111.515-debuginfoUpgrade kernel-livepatch-5.10.112-108.499Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-livepatch-5.10.126-117.518Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.112-108.499-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.126-117.518-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-livepatch-5.10.118-111.515Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.130-118.517Upgrade python-perfUpgrade kernel-livepatch-5.10.109-104.500Upgrade bpftoolUpgrade kernel-livepatch-5.10.109-104.500-debuginfo | Sep 30, 2022 | Jul 4, 2022 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | Jul 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.10-15.42Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jul 2, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-5_14_0-70_17_1-debuginfoUpgrade kpatch-patch-5_14_0-70_17_1Upgrade kpatch-patch-5_14_0-70_13_1Upgrade kpatch-patch-5_14_0-70_22_1-debuginfoUpgrade kpatch-patch-5_14_0-70_17_1-debugsourceUpgrade kpatch-patch-5_14_0-70_22_1-debugsourceUpgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-70_22_1 | Oct 20, 2022 | Jul 4, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf | Oct 28, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade perf | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Sep 14, 2022 | Jul 4, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 22, 2022 | Jul 2, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2022 | Jul 4, 2022 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-preemptUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade dtb-zteUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade dtb-alUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade kernel-preempt-develUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade cluster-md-kmp-preemptUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade kernel-azureUpgrade kselftests-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade dtb-rockchipUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-preempt-optionalUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-macrosUpgrade kernel-preempt-extraUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kb | Oct 26, 2022 | Jul 4, 2022 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1014-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-124-genericUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-191-lowlatencyUpgrade linux-image-5.4.0-1081-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-43-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-43-genericUpgrade linux-image-5.15.0-1016-oracleUpgrade linux-image-5.15.0-1016-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1117-raspi2Upgrade linux-image-5.4.0-1068-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1135-snapdragonUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1012-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1051-dell300xUpgrade linux-image-5.15.0-1017-azureUpgrade linux-image-5.4.0-124-generic-lpaeUpgrade linux-image-4.15.0-1125-kvmUpgrade linux-image-4.15.0-191-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1083-awsUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.14.0-1046-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1013-raspi-nolpaeUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1073-kvmUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-5.4.0-1086-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1089-azureUpgrade linux-image-genericUpgrade linux-image-4.4.0-1111-kvmUpgrade linux-image-4.15.0-1139-aws-hweUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1044-bluefieldUpgrade linux-image-4.4.0-1110-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-124-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-43-lowlatency-64kUpgrade linux-image-5.4.0-1031-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1013-intel-iotgUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1017-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1080-gkeUpgrade linux-image-4.4.0-230-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1139-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1016-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1013-raspiUpgrade linux-image-5.15.0-43-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1104-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1134-gcpUpgrade linux-image-4.15.0-191-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-43-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-5.17.0-1014-oemUpgrade linux-image-5.4.0-1051-gkeopUpgrade linux-image-5.4.0-1089-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1149-azureUpgrade linux-image-4.4.0-230-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1146-awsUpgrade linux-image-generic-64k-hwe-20.04 | Jul 29, 2022 | Jul 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub