CVE-2022-2588

2024-01-0817:50:47

CWE-416

canonical

www.cve.org

cve-2022-2588

linux kernel

filter implementation

hashtable

vulnerability

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

JSON

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

CNA Affected

[
  {
    "packageName": "linux",
    "product": "linux",
    "vendor": "The Linux Kernel Organization",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "lessThan": "6.0~rc1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]