K000133447 : Linux kernel vulnerability CVE-2022-32250

Security Advisory Description

net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free. (CVE-2022-32250)

Impact

For products with None in theVersions known to be vulnerable column, there is no impact.

A local attacker with user access to the system and the ability to create user/net namespaces may be able to exploit this flaw, leading to privilege escalation.