Linux · Kernel
CVE-2022-2586
Linux Kernel Use-After-Free Vulnerability
Exploited in attacks
Medium 5.3 Attack chance: 10%
What it is
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
CISA: Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.
What to do
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Deadline for US federal agencies: July 17, 2024
- Added to the CISA list
- June 26, 2024
- Published
- January 8, 2024
- Severity
- Medium 5.3 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 10% in the top 4.4% of all known vulnerabilities
- Weakness
- CWE-416
- More details
- NVD · CVE.org · CISA
All references (13)
- https://ubuntu.com/security/notices/USN-5564-1
- https://ubuntu.com/security/notices/USN-5560-2
- https://ubuntu.com/security/notices/USN-5582-1
- https://ubuntu.com/security/notices/USN-5567-1
- https://ubuntu.com/security/notices/USN-5560-1
- https://ubuntu.com/security/notices/USN-5566-1
- https://www.openwall.com/lists/oss-security/2022/08/09/5
- https://ubuntu.com/security/notices/USN-5565-1
- https://www.zerodayinitiative.com/advisories/ZDI-22-1118/
- https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t
- https://ubuntu.com/security/notices/USN-5562-1
- https://ubuntu.com/security/notices/USN-5557-1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
More exploited flaws from Linux
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 18, 2026 | Improper Check for Unusual or Exceptional Conditions | Kernel | Critical 9.8 | 3.3% |
| Sep 18, 2026 | Race Condition | Kernel | High 7.8 | 1.6% |
| Sep 18, 2026 | Out-of-Bounds Write | Kernel | High 8.8 | 0.9% |
| Aug 27, 2026 | Unspecified | Kernel | High 7.8 | 0.7% |
| Aug 26, 2026 | Out-of-Bounds Write | Kernel | High 7.8 | 8.9% |
| Jun 2, 2026 | Improper Authentication | Kernel | High 7.8 | 5.5% |
| May 1, 2026 | Incorrect Resource Transfer Between Spheres | Kernel | High 7.8 | 98% |
| Jan 26, 2026 | Integer Overflow | Kernel | High 7.8 | 15% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.