An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extra | Oct 20, 2022 | Jul 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-develUpgrade kernel-livepatch-5.10.126-117.518Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.118-111.515-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.10.112-108.499-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.112-108.499Upgrade bpftoolUpgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-livepatch-5.10.118-111.515Upgrade kernel-livepatch-5.10.109-104.500Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.126-117.518-debuginfoUpgrade kernel-livepatch-5.10.109-104.500-debuginfoUpgrade kernel-livepatch-4.14.318-240.529Upgrade bpftool-debuginfoUpgrade kernel-tools | Sep 30, 2022 | Jul 4, 2022 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | Jul 4, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-headers | Feb 17, 2025 | Jul 2, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-70_22_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-70_22_1-debugsourceUpgrade kpatch-patch-5_14_0-70_17_1-debuginfoUpgrade kpatch-patch-5_14_0-70_22_1-debuginfoUpgrade kpatch-patch-5_14_0-70_17_1-debugsourceUpgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-5_14_0-70_17_1Upgrade kpatch-patch-5_14_0-70_13_1 | Oct 20, 2022 | Jul 4, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel | Oct 28, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 14, 2022 | Jul 4, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 22, 2022 | Jul 2, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2022 | Jul 4, 2022 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-preemptUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade dlm-kmp-preemptUpgrade kernel-preempt-optionalUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade dtb-alUpgrade ocfs2-kmp-preemptUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade dtb-zteUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade kselftests-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-cavium | Oct 26, 2022 | Jul 4, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-191-generic-lpaeUpgrade linux-image-4.15.0-191-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1014-gkeUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1016-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1017-azureUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1012-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-124-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-oem-20.04dUpgrade linux-image-5.14.0-1046-oemUpgrade linux-image-5.4.0-1083-awsUpgrade linux-image-5.4.0-1068-raspiUpgrade linux-image-5.4.0-124-generic-lpaeUpgrade linux-image-4.15.0-1135-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1013-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1117-raspi2Upgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-43-genericUpgrade linux-image-5.4.0-1073-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1125-kvmUpgrade linux-image-4.15.0-1051-dell300xUpgrade linux-image-5.4.0-1081-oracleUpgrade linux-image-5.15.0-1016-oracleUpgrade linux-image-5.15.0-43-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1016-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1134-gcpUpgrade linux-image-5.4.0-1051-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1013-intel-iotgUpgrade linux-image-oemUpgrade linux-image-5.15.0-1013-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1139-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-230-genericUpgrade linux-image-4.15.0-1139-aws-hweUpgrade linux-image-oem-22.04Upgrade linux-image-4.15.0-191-genericUpgrade linux-image-4.4.0-230-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-genericUpgrade linux-image-4.4.0-1146-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.4.0-1111-kvmUpgrade linux-image-5.15.0-43-lowlatencyUpgrade linux-image-5.4.0-1089-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1104-oracleUpgrade linux-image-5.4.0-1089-azureUpgrade linux-image-5.4.0-1080-gkeUpgrade linux-image-5.4.0-1086-gcpUpgrade linux-image-5.4.0-124-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-5.17.0-1014-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1149-azureUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1110-awsUpgrade linux-image-ibmUpgrade linux-image-gke-5.4Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1017-awsUpgrade linux-image-5.15.0-43-generic-64kUpgrade linux-image-5.4.0-1044-bluefieldUpgrade linux-image-5.4.0-1031-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-43-lowlatency-64k | Jul 29, 2022 | Jul 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub