Lucene search

CanonicalCVE-2022-2588

HistoryJan 08, 2024 - 6:15 p.m.

CVE-2022-2588

2024-01-0818:15:44

CWE-415

CWE-416

canonical

web.nvd.nist.gov

190

linux

kernel

vulnerability

cls_route

cve-2022-2588

nvd

security

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

21.8%

JSON

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Affected configurations

Nvd

Node

linuxlinux_kernelRange<4.9.326

linuxlinux_kernelRange4.10–4.14.291

linuxlinux_kernelRange4.15–4.19.256

linuxlinux_kernelRange4.20–5.4.211

linuxlinux_kernelRange5.5–5.10.137

linuxlinux_kernelRange5.11–5.15.61

linuxlinux_kernelRange5.16–5.18.18

linuxlinux_kernelRange5.19–5.19.2

Node

canonicalubuntu_linuxMatch14.04esm

canonicalubuntu_linuxMatch16.04esm

canonicalubuntu_linuxMatch18.04esm

canonicalubuntu_linuxMatch20.04lts

canonicalubuntu_linuxMatch22.04lts

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
canonicalubuntu_linux16.04cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
canonicalubuntu_linux18.04cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
canonicalubuntu_linux20.04cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
canonicalubuntu_linux22.04cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
canonical	ubuntu_linux	14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::
canonical	ubuntu_linux	16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::
canonical	ubuntu_linux	18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04::::esm:::
canonical	ubuntu_linux	20.04	cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::
canonical	ubuntu_linux	22.04	cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts:::

CNA Affected

[
  {
    "packageName": "linux",
    "product": "linux",
    "vendor": "The Linux Kernel Organization",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "lessThan": "6.0~rc1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]