What’s Vulnerable › Vulnerabilities

CVE-2022-1015

• Severity: medium (CVSS 6.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-04-29 · updated 2026-10-14
• Weakness: CWE-787

Description

A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.

Affected products

• Fedoraproject Fedora: 35
• Linux kernel: before 5.16.18 — fixed in 5.16.18

How to fix

Upgrade to a fixed version: Linux kernel 5.16.18. Check the vendor advisory for mitigations.

References

• http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/
• http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html
• http://www.openwall.com/lists/oss-security/2022/08/25/2
• http://www.openwall.com/lists/oss-security/2023/01/13/2
• http://www.openwall.com/lists/oss-security/2023/02/23/1
• https://bugzilla.redhat.com/show_bug.cgi?id=2065323
• https://seclists.org/oss-sec/2022/q1/205
• http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/
• http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html
• http://www.openwall.com/lists/oss-security/2022/08/25/2
• http://www.openwall.com/lists/oss-security/2023/01/13/2
• http://www.openwall.com/lists/oss-security/2023/02/23/1

Get alerted when CVE-2022-1015 or the next vulnerability affects your stack