CVE-2022-2588CWE-415CWE-416

CVE-2022-2588

Medium · published January 8, 2024

CVSS v3.1
5.3
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.05871 · 93.2th percentile
Weaknesses
CWE-415 · Double Free; CWE-416 · Use After Free
Published
2024-01-08T23:15Z
Affected products (13)
ProductVersionsFixed in
linux/linux_kernel< 4.9.3264.9.326
linux/linux_kernel≥ 4.10, < 4.14.2914.14.291
linux/linux_kernel≥ 4.15, < 4.19.2564.19.256
linux/linux_kernel≥ 4.20, < 5.4.2115.4.211
linux/linux_kernel≥ 5.5, < 5.10.1375.10.137
linux/linux_kernel≥ 5.11, < 5.15.615.15.61
linux/linux_kernel≥ 5.16, < 5.18.185.18.18
linux/linux_kernel≥ 5.19, < 5.19.25.19.2
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
References (34)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 · [email protected]https://github.com/Markakd/CVE-2022-2588 · [email protected]https://lore.kernel.org/netdev/[email protected]/T/#u · [email protected]https://ubuntu.com/security/notices/USN-5557-1 · [email protected]https://ubuntu.com/security/notices/USN-5560-1 · [email protected]https://ubuntu.com/security/notices/USN-5560-2 · [email protected]https://ubuntu.com/security/notices/USN-5562-1 · [email protected]https://ubuntu.com/security/notices/USN-5564-1 · [email protected]https://ubuntu.com/security/notices/USN-5565-1 · [email protected]https://ubuntu.com/security/notices/USN-5566-1 · [email protected]https://ubuntu.com/security/notices/USN-5567-1 · [email protected]https://ubuntu.com/security/notices/USN-5582-1 · [email protected]https://ubuntu.com/security/notices/USN-5588-1 · [email protected]https://www.openwall.com/lists/oss-security/2022/08/09/6 · [email protected]https://www.zerodayinitiative.com/advisories/ZDI-22-1117/ · [email protected]https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 · af854a3a-2127-422b-91ae-364da2661108https://github.com/Markakd/CVE-2022-2588 · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/netdev/[email protected]/T/#u · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5557-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5560-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5560-2 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5562-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5564-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5565-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5566-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5567-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5582-1 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/notices/USN-5588-1 · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2022/08/09/6 · af854a3a-2127-422b-91ae-364da2661108https://www.zerodayinitiative.com/advisories/ZDI-22-1117/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-419740.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-769027.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-831302.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 08 JAN 17:50Z
    It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its…
    cvelistv5