Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-25636
HistoryFeb 22, 2022 - 12:00 a.m.

CVE-2022-25636

2022-02-2200:00:00
ubuntu.com
ubuntu.com
27
cve-2022-25636
linux kernel
privilege escalation
heap out-of-bounds write
nf_tables_offload
unix

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.7%

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows
local users to gain privileges because of a heap out-of-bounds write. This
is related to nf_tables_offload.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-104.118UNKNOWN
ubuntu21.10noarchlinux< 5.13.0-35.40UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1068.72UNKNOWN
ubuntu21.10noarchlinux-aws< 5.13.0-1017.19UNKNOWN
ubuntu20.04noarchlinux-aws-5.13< 5.13.0-1017.19~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1068.72~18.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1072.75UNKNOWN
ubuntu21.10noarchlinux-azure< 5.13.0-1017.19UNKNOWN
ubuntu20.04noarchlinux-azure-5.13< 5.13.0-1017.19~20.04.1UNKNOWN
ubuntu18.04noarchlinux-azure-5.4< 5.4.0-1072.75~18.04.1UNKNOWN
Rows per page:
1-10 of 371

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.7%