What’s Vulnerable › Vulnerabilities

CVE-2022-2586: Linux Kernel Use-After-Free Vulnerability

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2024-06-26
• EPSS: 10.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-08 · updated 2026-10-14
• Weakness: CWE-416

Description

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Affected products

• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 20.04, 22.04
• Linux kernel: from 3.16 before 4.14.316; from 4.15 before 4.19.256; from 4.20 before 5.4.211; from 5.5 before 5.10.137; from 5.11 before 5.15.61; from 5.16 before 5.18.18 — fixed in 4.14.316, 4.19.256, 5.10.137, 5.15.61, 5.18.18, 5.19.2
• Siemens Simatic S7-1500 Tm Mfp Firmware: before 1.1 — fixed in 1.1
• Siemens Sinec Os: before 2.4 — fixed in 2.4

How to fix

Upgrade to a fixed version: Linux kernel 4.14.316, 4.19.256, 5.10.137, 5.15.61; Siemens Simatic S7-1500 Tm Mfp Firmware 1.1; Siemens Sinec Os 2.4. Check the vendor advisory for mitigations.

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
• https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t
• https://ubuntu.com/security/notices/USN-5557-1
• https://ubuntu.com/security/notices/USN-5560-1
• https://ubuntu.com/security/notices/USN-5560-2
• https://ubuntu.com/security/notices/USN-5562-1
• https://ubuntu.com/security/notices/USN-5564-1
• https://ubuntu.com/security/notices/USN-5565-1
• https://ubuntu.com/security/notices/USN-5566-1
• https://ubuntu.com/security/notices/USN-5567-1
• https://ubuntu.com/security/notices/USN-5582-1
• https://www.openwall.com/lists/oss-security/2022/08/09/5

Get alerted when CVE-2022-2586 or the next vulnerability affects your stack