CVE-2022-2588

Katalog CVE

CVSS 7.8 · High EPSS 5,9%

Kerentanan Use After Free pada linux kernel, canonical ubuntu linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Rincian

Terbit di NVD

8 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free
CWE-415: Double Free

EPSS (30 hari)

5,9% peluang dieksploitasi; lebih tinggi dari 93,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u mailing list · patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5557-1 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5560-1 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5560-2 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5562-1 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5564-1 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5565-1 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5566-1 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5567-1 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5582-1 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-5588-1 advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-22-1117/ advisory pihak ketiga · vdb entry
• https://github.com/Markakd/CVE-2022-2588 exploit
• https://www.openwall.com/lists/oss-security/2022/08/09/6 mailing list