CVE-2022-2588

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588	Third Party Advisory
https://github.com/Markakd/CVE-2022-2588	Exploit
https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u	Mailing List Patch
https://ubuntu.com/security/notices/USN-5557-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5560-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5560-2	Third Party Advisory
https://ubuntu.com/security/notices/USN-5562-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5564-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5565-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5566-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5567-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5582-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5588-1	Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/09/6	Mailing List
https://www.zerodayinitiative.com/advisories/ZDI-22-1117/	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:18.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts:::

History

12 Jan 2024, 16:47

Type	Values Removed	Values Added
First Time		Linux linux Kernel Canonical ubuntu Linux Canonical Linux
Summary		(es) Se descubrió que la implementación del filtro cls_route en el kernel de Linux no eliminaba un filtro antiguo de la tabla hash antes de liberarlo si su identificador tenía el valor 0.
References	~~() https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 -~~	() https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 - Third Party Advisory
References	~~() https://github.com/Markakd/CVE-2022-2588 -~~	() https://github.com/Markakd/CVE-2022-2588 - Exploit
References	~~() https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u -~~	() https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u - Mailing List, Patch
References	~~() https://ubuntu.com/security/notices/USN-5557-1 -~~	() https://ubuntu.com/security/notices/USN-5557-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5560-1 -~~	() https://ubuntu.com/security/notices/USN-5560-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5560-2 -~~	() https://ubuntu.com/security/notices/USN-5560-2 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5562-1 -~~	() https://ubuntu.com/security/notices/USN-5562-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5564-1 -~~	() https://ubuntu.com/security/notices/USN-5564-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5565-1 -~~	() https://ubuntu.com/security/notices/USN-5565-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5566-1 -~~	() https://ubuntu.com/security/notices/USN-5566-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5567-1 -~~	() https://ubuntu.com/security/notices/USN-5567-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5582-1 -~~	() https://ubuntu.com/security/notices/USN-5582-1 - Third Party Advisory
References	~~() https://ubuntu.com/security/notices/USN-5588-1 -~~	() https://ubuntu.com/security/notices/USN-5588-1 - Third Party Advisory
References	~~() https://www.openwall.com/lists/oss-security/2022/08/09/6 -~~	() https://www.openwall.com/lists/oss-security/2022/08/09/6 - Mailing List
References	~~() https://www.zerodayinitiative.com/advisories/ZDI-22-1117/ -~~	() https://www.zerodayinitiative.com/advisories/ZDI-22-1117/ - Third Party Advisory, VDB Entry
CWE		CWE-415
CPE		cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:18.04::::esm::: cpe:2.3:o:linux:linux_kernel::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~5.3~~	v2 : unknown v3 : 7.8

08 Jan 2024, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-01-08 18:15

Updated : 2024-01-12 16:47

NVD link : CVE-2022-2588

Mitre link : CVE-2022-2588

CVE.ORG link : CVE-2022-2588

JSON object : View

Products Affected

canonical

ubuntu_linux

linux

linux_kernel

CWE

CWE-415

Double Free

CWE-416

Use After Free

{"id": "CVE-2022-2588", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "security@ubuntu.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 1.0}]}, "published": "2024-01-08T18:15:44.840", "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://github.com/Markakd/CVE-2022-2588", "tags": ["Exploit"], "source": "security@ubuntu.com"}, {"url": "https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u", "tags": ["Mailing List", "Patch"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5557-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5560-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5560-2", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5562-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5564-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5565-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5566-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5567-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5582-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://ubuntu.com/security/notices/USN-5588-1", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://www.openwall.com/lists/oss-security/2022/08/09/6", "tags": ["Mailing List"], "source": "security@ubuntu.com"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1117/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@ubuntu.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-415"}]}, {"type": "Secondary", "source": "security@ubuntu.com", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0."}, {"lang": "es", "value": "Se descubri\u00f3 que la implementaci\u00f3n del filtro cls_route en el kernel de Linux no eliminaba un filtro antiguo de la tabla hash antes de liberarlo si su identificador ten\u00eda el valor 0."}], "lastModified": "2024-01-12T16:47:44.873", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3369AE19-74F5-4B36-A1B4-3C7A6FC23C3B", "versionEndIncluding": "5.19.17"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*", "vulnerable": true, "matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "vulnerable": true, "matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*", "vulnerable": true, "matchCriteriaId": "B3293E55-5506-4587-A318-D1734F781C09"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "359012F1-2C63-415A-88B8-6726A87830DE"}], "operator": "OR"}]}], "sourceIdentifier": "security@ubuntu.com"}