(Pwn2Own) Linux Kernel nf_tables Use-After-Free Privilege Escalation Vulnerability

🗓️ 16 Mar 2026 00:00:00Reported by Keith Yeo (@kyeojy)Type

zdi

zdi🔗 www.zerodayinitiative.com👁 2 Views

Local attacker can escalate to root via nf_tables use-after-free in Linux kernel through nft_objects.

Reporter	Title	Published	Views	Family All 546
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data has a vulnerable base OS image due to kernel-headers ( CVE-2022-1012, CVE-2022-32250 )	3 Feb 202523:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and OpenSSL may affect IBM Spectrum Copy Data Management	17 Sep 202201:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	24 Oct 202220:10	–	ibm
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	24 Aug 202206:00	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	6 Dec 202413:49	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	27 Jan 202314:44	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	9 Jun 202419:53	–	githubexploit

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2022-32250

16 Mar 2026 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 38.8

EPSS0.0141

local attacker privilege escalation root access nf tables use after free nft objects linux kernel