Main
Vulnerability Database
Exploits
ID:8577 - Exploit for Use-after-free in Linux kernel - CVE-2022-2586
ID:8577 - Exploit for Use-after-free in Linux kernel - CVE-2022-2586
Published: November 7, 2022
Vulnerability identifier: #VU66396
Vulnerability risk: Low
CVE-ID: CVE-2022-2586
CWE-ID: CWE-416
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the the netfilter subsystem implementation in Linux kernel when preventing one nft object from referencing an nft set in another nft table. A local user can trigger a use-after-free error and execute arbitrary code on the system with elevated privileges.
Remediation
Install updates from vendor's website.