net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.

🗓️ 12 Jun 2022 07:00:00Reported by MicrosoftType

Local user with net namespace can gain root due to a use-after-free from NFT_STATEFUL_EXPR in nf_tables_api.c kernel 5.18.1.

Reporter	Title	Published	Views	Family All 535
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data has a vulnerable base OS image due to kernel-headers ( CVE-2022-1012, CVE-2022-32250 )	3 Feb 202523:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and OpenSSL may affect IBM Spectrum Copy Data Management	17 Sep 202201:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	24 Oct 202220:10	–	ibm
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	24 Aug 202206:00	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	6 Dec 202413:49	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	27 Jan 202314:44	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	9 Jun 202419:53	–	githubexploit