What’s Vulnerable › Vulnerabilities

CVE-2022-34918

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-07-04 · updated 2026-10-14
• Weakness: CWE-843

Description

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

Affected products

• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 20.04, 22.04
• Debian Linux: 11.0
• Linux kernel: from 4.1 before 4.14.316; from 4.15 before 4.19.284; from 4.20 before 5.4.244; from 5.5 before 5.10.130; from 5.11 before 5.15.54; from 5.16 before 5.18.11 — fixed in 4.14.316, 4.19.284, 5.10.130, 5.15.54, 5.18.11, 5.4.244
• NetApp H300S Firmware: all versions
• NetApp H410C Firmware: all versions
• NetApp H410S Firmware: all versions
• NetApp H500S Firmware: all versions
• NetApp H700S Firmware: all versions

How to fix

Upgrade to a fixed version: Linux kernel 4.14.316, 4.19.284, 5.10.130, 5.15.54. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html
• http://packetstormsecurity.com/files/168543/Netfilter-nft_set_elem_init-Heap-Overflow-Privilege-Escalation.html
• http://www.openwall.com/lists/oss-security/2022/07/05/1
• http://www.openwall.com/lists/oss-security/2022/08/06/5
• https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e6bc1f6cabcd30aba0b11219d8e01b952eacbb6
• https://lore.kernel.org/netfilter-devel/cd9428b6-7ffb-dd22-d949-d86f4869f452%40randorisec.fr/T/#u
• https://security.netapp.com/advisory/ntap-20220826-0004/
• https://www.debian.org/security/2022/dsa-5191
• https://www.openwall.com/lists/oss-security/2022/07/02/3
• https://www.randorisec.fr/crack-linux-firewall/
• http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html
• http://packetstormsecurity.com/files/168543/Netfilter-nft_set_elem_init-Heap-Overflow-Privilege-Escalation.html

Get alerted when CVE-2022-34918 or the next vulnerability affects your stack