CVE-2022-2586

Linux Kernel Use-After-Free Vulnerability

Simatic S7-1500 Tm Mfp Firmware

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

8. Jan 2024

Ausgewertete Quellen

• Ubuntu
  https://ubuntu.com/security/notices/USN-5557-1
• Ubuntu
  https://ubuntu.com/security/notices/USN-5560-1
• Ubuntu
  https://ubuntu.com/security/notices/USN-5560-2
• Ubuntu
  https://ubuntu.com/security/notices/USN-5562-1
• Ubuntu
  https://ubuntu.com/security/notices/USN-5564-1
• Ubuntu
  https://ubuntu.com/security/notices/USN-5565-1
• Ubuntu
  https://ubuntu.com/security/notices/USN-5566-1
• Ubuntu
  https://ubuntu.com/security/notices/USN-5567-1
• Ubuntu
  https://ubuntu.com/security/notices/USN-5582-1
• Hinweis
  https://cert-portal.siemens.com/productcert/html/ssa-794697.html
• Hinweis
  https://cert-portal.siemens.com/productcert/html/ssa-806742.html
• Hinweis
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
• Hinweis
  https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586
• Hinweis
  https://www.zerodayinitiative.com/advisories/ZDI-22-1118/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586
• CISA
  Linux Kernel Use-After-Free Vulnerability
• NVD
  CVE-2022-2586