An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matched | Oct 20, 2022 | Jul 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade perfUpgrade kernel-livepatch-5.10.112-108.499-debuginfoUpgrade kernel-livepatch-5.10.118-111.515-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-5.10.112-108.499Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-livepatch-5.10.126-117.518Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.109-104.500Upgrade kernel-livepatch-5.10.130-118.517Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.109-104.500-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.118-111.515Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.126-117.518-debuginfoUpgrade kernel-tools | Sep 30, 2022 | Jul 4, 2022 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | Jul 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel | Feb 17, 2025 | Jul 2, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kernel-rtUpgrade kernelUpgrade kpatch-patch-5_14_0-70_22_1-debugsourceUpgrade kpatch-patch-5_14_0-70_22_1Upgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-5_14_0-70_17_1Upgrade kpatch-patch-5_14_0-70_22_1-debuginfoUpgrade kpatch-patch-5_14_0-70_17_1-debugsourceUpgrade kpatch-patch-5_14_0-70_17_1-debuginfoUpgrade kpatch-patch-5_14_0-70_13_1 | Oct 20, 2022 | Jul 4, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools | Oct 28, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perf | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Sep 14, 2022 | Jul 4, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 22, 2022 | Jul 2, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 20, 2022 | Jul 4, 2022 |
| Suse | — | Upgrade kernel-preempt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dlm-kmp-preemptUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-preempt-optionalUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-preemptUpgrade dtb-alUpgrade dtb-lgUpgrade gfs2-kmp-preemptUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade dtb-rockchipUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-zteUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kselftests-kmp-preemptUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-rtUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-devel-azure | Oct 26, 2022 | Jul 4, 2022 |
| Ubuntu | — | Upgrade linux-image-5.17.0-1014-oemUpgrade linux-image-5.15.0-1016-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1017-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-124-lowlatencyUpgrade linux-image-4.4.0-1110-awsUpgrade linux-image-5.4.0-1044-bluefieldUpgrade linux-image-5.15.0-43-generic-64kUpgrade linux-image-4.15.0-191-genericUpgrade linux-image-4.15.0-1134-gcpUpgrade linux-image-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-bluefieldUpgrade linux-image-4.4.0-230-lowlatencyUpgrade linux-image-5.4.0-1051-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1149-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1013-intel-iotgUpgrade linux-image-4.15.0-1139-aws-hweUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1013-raspiUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-43-lowlatency-64kUpgrade linux-image-4.15.0-1104-oracleUpgrade linux-image-5.4.0-1086-gcpUpgrade linux-image-4.15.0-1139-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-43-lowlatencyUpgrade linux-image-5.4.0-1080-gkeUpgrade linux-image-4.4.0-1111-kvmUpgrade linux-image-5.4.0-1089-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1146-awsUpgrade linux-image-4.4.0-230-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1089-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1031-ibmUpgrade linux-image-5.4.0-1068-raspiUpgrade linux-image-4.15.0-1051-dell300xUpgrade linux-image-5.4.0-1083-awsUpgrade linux-image-5.15.0-43-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1012-ibmUpgrade linux-image-5.15.0-1014-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1117-raspi2Upgrade linux-image-4.15.0-191-lowlatencyUpgrade linux-image-5.15.0-1016-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-124-genericUpgrade linux-image-gkeopUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1081-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1013-raspi-nolpaeUpgrade linux-image-5.14.0-1046-oemUpgrade linux-image-5.4.0-1073-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-191-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1125-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-43-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-124-generic-lpaeUpgrade linux-image-5.15.0-1016-oracleUpgrade linux-image-5.15.0-1017-azureUpgrade linux-image-4.15.0-1135-snapdragon | Jul 29, 2022 | Jul 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub