CVE-2022-34918High· 7.8▾ MidnightPoC availableAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250.…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 1.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
5.5%
5 GitHub repos · Metasploit ×1 (last check)
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
linux_kernel >= 4.1, < 4.14.316linux_kernel >= 4.15, < 4.19.284linux_kernel >= 4.20, < 5.4.244linux_kernel >= 5.5, < 5.10.130linux_kernel >= 5.11, < 5.15.54linux_kernel >= 5.16, < 5.18.11debian_linux = 11.0ubuntu_linux = 14.04ubuntu_linux = 16.04ubuntu_linux = 18.04ubuntu_linux = 20.04ubuntu_linux = 22.04h300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwareh410c_firmwareUpgrade past the affected range:
linux_kernel 5.18.11Connected by shared product, vendor, weakness, or advisory.
CVE-2021-33655Medium· 6.7When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.
CVE-2022-1015Medium· 6.6A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem
CVE-2021-4037Medium· 4.4A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permis…
CVE-2022-32250High· 7.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
CVE-2022-3635Medium· 5.5A vulnerability, which was classified as critical, has been found in Linux Kernel
CVE-2022-3564Medium· 5.5A vulnerability classified as critical was found in Linux Kernel