kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root

🗓️ 19 Sep 2022 11:53:21Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

A use after free write in the Linux kernel netfilter subsystem enables local privilege escalation to root.

Reporter	Title	Published	Views	Family All 526
ibm	Security Bulletin: IBM Cloud Pak for Data has a vulnerable base OS image due to kernel-headers ( CVE-2022-1012, CVE-2022-32250 )	3 Feb 202523:01	–	ibm
ibm	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
ibm	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
ibm	Security Bulletin: Vulnerabilities in Linux Kernel and OpenSSL may affect IBM Spectrum Copy Data Management	17 Sep 202201:21	–	ibm
ibm	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	24 Oct 202220:10	–	ibm
githubexploit	Exploit for Use After Free in Linux Linux_Kernel	24 Aug 202206:00	–	githubexploit
githubexploit	Exploit for Use After Free in Linux Linux_Kernel	6 Dec 202413:49	–	githubexploit
githubexploit	Exploit for Use After Free in Linux Linux_Kernel	27 Jan 202314:44	–	githubexploit
githubexploit	Exploit for Use After Free in Linux Linux_Kernel	9 Jun 202419:53	–	githubexploit

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8	x86_64	redhat-virtualization-host-image-update	4.5.2-202209140405_8.6	redhat-virtualization-host-image-update-4.5.2-202209140405_8.6.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2022-32250
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-32250
cve	www.cve.org/CVERecord
openwall	www.openwall.com/lists/oss-security/2022/05/31/1

03 Jul 2026 01:42Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.2

CVSS 3.17.8

EPSS0.02881

linux kernel netfilter subsystem use after free netfilter tables api privilege escalation local attacker root