An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade bpftool | Oct 20, 2022 | Jul 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.126-117.518Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-livepatch-5.10.112-108.499Upgrade kernel-livepatch-5.10.112-108.499-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.118-111.515-debuginfoUpgrade kernel-livepatch-5.10.130-118.517Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.109-104.500-debuginfoUpgrade kernel-livepatch-4.14.318-240.529Upgrade python-perfUpgrade kernel-livepatch-5.10.118-111.515Upgrade kernel-livepatch-5.10.109-104.500Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.126-117.518-debuginfo | Sep 30, 2022 | Jul 4, 2022 |
| Amazon_linux | — | Upgrade kernel | Jul 4, 2023 | Jul 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-devel | Feb 17, 2025 | Jul 2, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_22_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-70_22_1Upgrade kpatch-patch-5_14_0-70_17_1-debugsourceUpgrade kpatch-patch-5_14_0-70_17_1Upgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-5_14_0-70_13_1Upgrade kpatch-patch-5_14_0-70_17_1-debuginfoUpgrade kpatch-patch-5_14_0-70_22_1-debuginfo | Oct 20, 2022 | Jul 4, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf | Oct 28, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade perf | Oct 11, 2022 | Jul 4, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Sep 14, 2022 | Jul 4, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 22, 2022 | Jul 2, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2022 | Jul 4, 2022 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-symsUpgrade kselftests-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-lgUpgrade kernel-preemptUpgrade ocfs2-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-preemptUpgrade dtb-qcomUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade dtb-alUpgrade dtb-zteUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-azure-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-preemptUpgrade kernel-default-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-debug-devel | Oct 26, 2022 | Jul 4, 2022 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1013-intel-iotgUpgrade linux-image-5.4.0-1086-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1051-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1110-awsUpgrade linux-image-4.4.0-230-genericUpgrade linux-image-5.15.0-1016-kvmUpgrade linux-image-4.4.0-230-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-4.4.0-1111-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1149-azureUpgrade linux-image-5.17.0-1014-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1139-aws-hweUpgrade linux-image-4.4.0-1146-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1044-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1031-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-43-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1089-azure-fdeUpgrade linux-image-5.15.0-1017-awsUpgrade linux-image-oemUpgrade linux-image-5.15.0-43-generic-64kUpgrade linux-image-5.15.0-43-lowlatencyUpgrade linux-image-5.15.0-1013-raspiUpgrade linux-image-gke-5.4Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-191-genericUpgrade linux-image-ibmUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-124-lowlatencyUpgrade linux-image-4.15.0-1104-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1089-azureUpgrade linux-image-5.4.0-1080-gkeUpgrade linux-image-4.15.0-1139-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1134-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-124-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.14.0-1046-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-124-generic-lpaeUpgrade linux-image-4.15.0-191-generic-lpaeUpgrade linux-image-4.15.0-1125-kvmUpgrade linux-image-4.15.0-191-lowlatencyUpgrade linux-image-4.15.0-1117-raspi2Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1016-oracleUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-43-genericUpgrade linux-image-5.15.0-1013-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1068-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-43-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1051-dell300xUpgrade linux-image-4.15.0-1135-snapdragonUpgrade linux-image-5.15.0-1014-gkeUpgrade linux-image-5.15.0-1016-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1081-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1083-awsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1012-ibmUpgrade linux-image-5.15.0-1017-azureUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1073-kvmUpgrade linux-image-dell300xUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-lts-xenial | Jul 29, 2022 | Jul 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub