01 Record

CVE-2022-2586

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

MediumKEVPUBLISHEDCNA: canonical

CNA base score5.3 CVSS v3.xCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

View raw JSON

02 Description

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

03 Exploitation and scoring

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2024-06-26. Federal remediation due 2024-07-17.

SSVC decision

ExploitationactiveCISA reports credible evidence of active exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

10.46% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 95.3% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-08-20.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-01-08 17:46Z2 YR AGO

Last updated

2026-08-20 13:57Z15 DAYS AGO

Reserved

2022-07-29

Assigning CNA

canonical

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CNA CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

bfdfa85e9299b691b1704de4ef2cee3106ff342414dde15071321ff46b511273

05 Affected products

VendorProductVersionsPlatforms

The Linux Kernel Organizationlinux3.16 to < 4.14.316, 4.15 to < 4.19.256, 4.20 to < 5.4.211, 5.5 to < 5.10.137, 5.11 to < 5.15.61, 5.16 to < 5.18.18, 5.19 to < 5.19.2Linux

linuxlinux_kernel0 to < 6.0-rc1—

06 References

ubuntu.comhttps://ubuntu.com/security/notices/USN-5564-1third-party-advisory
ubuntu.comhttps://ubuntu.com/security/notices/USN-5560-2third-party-advisory
ubuntu.comhttps://ubuntu.com/security/notices/USN-5582-1third-party-advisory
ubuntu.comhttps://ubuntu.com/security/notices/USN-5567-1third-party-advisory
ubuntu.comhttps://ubuntu.com/security/notices/USN-5560-1third-party-advisory
ubuntu.comhttps://ubuntu.com/security/notices/USN-5566-1third-party-advisory
www.openwall.comhttps://www.openwall.com/lists/oss-security/2022/08/09/5issue-tracking
ubuntu.comhttps://ubuntu.com/security/notices/USN-5565-1third-party-advisory
www.zerodayinitiative.comhttps://www.zerodayinitiative.com/advisories/ZDI-22-1118/issue-tracking
lore.kernel.orghttps://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#tissue-tracking
ubuntu.comhttps://ubuntu.com/security/notices/USN-5562-1third-party-advisory
ubuntu.comhttps://ubuntu.com/security/notices/USN-5557-1third-party-advisory
cve.mitre.orghttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586issue-tracking
www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586government-resource
www.vicarius.iohttps://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586

01 Record index

CVE-2022-2586

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2022-2586

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References