An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-docUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules | Oct 20, 2022 | Jul 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.118-111.515Upgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.109-104.500-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.109-104.500Upgrade python-perfUpgrade kernel-livepatch-5.10.126-117.518-debuginfoUpgrade kernel-livepatch-5.10.130-118.517Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.118-111.515-debuginfoUpgrade kernel-livepatch-5.10.112-108.499Upgrade perfUpgrade kernel-livepatch-5.10.112-108.499-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.126-117.518Upgrade kernel-tools-devel | Sep 30, 2022 | Jul 4, 2022 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | Jul 4, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jul 2, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_22_1-debugsourceUpgrade kernelUpgrade kpatch-patch-5_14_0-70_22_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kpatch-patch-5_14_0-70_22_1-debuginfoUpgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-5_14_0-70_13_1Upgrade kpatch-patch-5_14_0-70_17_1-debuginfoUpgrade kpatch-patch-5_14_0-70_17_1Upgrade kpatch-patch-5_14_0-70_17_1-debugsource | Oct 20, 2022 | Jul 4, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools | Oct 28, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 14, 2022 | Jul 4, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 22, 2022 | Jul 2, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2022 | Jul 4, 2022 |
| Suse | — | Upgrade kernel-debug-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-preempt-optionalUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-preemptUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-preempt-extraUpgrade kernel-default-extraUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade gfs2-kmp-preemptUpgrade dtb-xilinxUpgrade kernel-preempt-develUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kselftests-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade dtb-alUpgrade kernel-preemptUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-zteUpgrade cluster-md-kmp-preemptUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-preempt | Oct 26, 2022 | Jul 4, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1014-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1051-dell300xUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1135-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1016-oracleUpgrade linux-image-5.4.0-124-genericUpgrade linux-image-5.15.0-43-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1016-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1017-azureUpgrade linux-image-5.15.0-1012-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1083-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1068-raspiUpgrade linux-image-5.14.0-1046-oemUpgrade linux-image-dell300xUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1013-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1081-oracleUpgrade linux-image-5.4.0-124-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1117-raspi2Upgrade linux-image-4.15.0-191-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-191-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1073-kvmUpgrade linux-image-5.15.0-43-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1125-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-230-genericUpgrade linux-image-4.15.0-1104-oracleUpgrade linux-image-5.15.0-1016-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1013-raspiUpgrade linux-image-4.4.0-1146-awsUpgrade linux-image-4.15.0-1149-azureUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1080-gkeUpgrade linux-image-4.15.0-1139-awsUpgrade linux-image-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1089-azure-fdeUpgrade linux-image-5.15.0-43-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1086-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-43-generic-64kUpgrade linux-image-5.4.0-1044-bluefieldUpgrade linux-image-5.4.0-1031-ibmUpgrade linux-image-5.15.0-1017-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1089-azureUpgrade linux-image-4.15.0-1134-gcpUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1051-gkeopUpgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-1110-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.17.0-1014-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-191-genericUpgrade linux-image-4.15.0-1139-aws-hweUpgrade linux-image-5.4.0-124-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-43-lowlatency-64kUpgrade linux-image-5.15.0-1013-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-4.4.0-1111-kvmUpgrade linux-image-4.4.0-230-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefield | Jul 29, 2022 | Jul 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub