UBUNTU-CVE-2022-32250

Dashboard / Vulnerabilities / UBUNTU-CVE-2022-32250

UBUNTU-CVE-2022-32250

Summary:

Details: net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.

References: https://ubuntu.com/security/CVE-2022-32250, https://www.openwall.com/lists/oss-security/2022/05/31/1, https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd, http://www.openwall.com/lists/oss-security/2022/06/03/1, http://www.openwall.com/lists/oss-security/2022/06/04/1, https://www.cve.org/CVERecord?id=CVE-2022-32250