Database/Kernel, userspace & hypervisor
Linux kernel (netfilter): Use-after-free write in the netfilter subsystem - privilege escalation to root
CVSS 7.8CVE-2022-32250Kernel, userspace & hypervisorcurated
Impact
Use-after-free write in the netfilter subsystem - privilege escalation to root
Who can reach it
Any tenant process in a container with CAP_NET_ADMIN in a userns
What to do
Livepatchable; otherwise drain + reboot
References
Related entries
- Linux kernel (netfilter): Integer overflow in nft_payload_copy_vlan - stack leak plus local privilege escalationCVE-2023-0179 · Linux kernel (netfilter)High
- Linux kernel (netfilter): nft_chain_filter NETDEV_UNREGISTER mishandling for inet/ingress basechains - UAFCVE-2024-26808 · Linux kernel (netfilter)Medium
- Linux kernel (nf_tables): Heap overflow in nft_set_elem_init() - local root, weaponised inside containersCVE-2022-34918 · Linux kernel (nf_tables)High
- Linux i915 GPU kernel driver (TLB invalidation): An incorrect TLB flush in i915 leaves the GPU able to reach memory itCVE-2022-4139 · Linux i915 GPU kernel driver (TLB invalidation)High
- Xen (shadow paging): x86 shadow plus log-dirty mode use-after-free - guest to hostCVE-2022-42332 · Xen (shadow paging)High
- Linux i915 GPU kernel driver: A use-after-free in the i915 GPU kernel driver. The general shape is that a GPU object isCVE-2022-48662 · Linux i915 GPU kernel driverHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.