High · published July 5, 2022
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.1, < 4.14.316 | 4.14.316 |
| linux/linux_kernel | ≥ 4.15, < 4.19.284 | 4.19.284 |
| linux/linux_kernel | ≥ 4.20, < 5.4.244 | 5.4.244 |
| linux/linux_kernel | ≥ 5.5, < 5.10.130 | 5.10.130 |
| linux/linux_kernel | ≥ 5.11, < 5.15.54 | 5.15.54 |
| linux/linux_kernel | ≥ 5.16, < 5.18.11 | 5.18.11 |
| debian/debian_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |