A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.
References
Link | Resource |
---|---|
http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/ | Exploit Third Party Advisory |
https://access.redhat.com/security/cve/CVE-2022-1016 | Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=2066614 | Issue Tracking Third Party Advisory |
https://seclists.org/oss-sec/2022/q1/205 | Exploit Mailing List Third Party Advisory |
Configurations
History
27 Jun 2023, 15:47
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-909 |
12 Feb 2023, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
CWE | CWE-824 |
02 Feb 2023, 21:22
Type | Values Removed | Values Added |
---|---|---|
References |
|
08 Sep 2022, 13:15
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://seclists.org/oss-sec/2022/q1/205 - Exploit, Mailing List, Third Party Advisory | |
References | (MISC) http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/ - Exploit, Third Party Advisory | |
References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2066614 - Issue Tracking, Third Party Advisory | |
References | (MISC) https://access.redhat.com/security/cve/CVE-2022-1016 - Third Party Advisory | |
CWE | CWE-416 | |
CPE | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:3.13:rc1:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
First Time |
Linux linux Kernel
Redhat Linux Redhat enterprise Linux |
29 Aug 2022, 15:48
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-08-29 15:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-1016
Mitre link : CVE-2022-1016
CVE.ORG link : CVE-2022-1016
JSON object : View
Products Affected
linux
- linux_kernel
redhat
- enterprise_linux