IM
IronMonkey Threat Research

CVE-2022-2588 HIGH

Published: 2024-01-08 | Last Modified: 2024-11-21 | Status: Modified

Description

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Additional Descriptions (1)

Se descubrió que la implementación del filtro cls_route en el kernel de Linux no eliminaba un filtro antiguo de la tabla hash antes de liberarlo si su identificador tenía el valor 0.

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-416
[email protected] Primary
en CWE-415

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd340af4bc0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340af50c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd39c4e5240> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36b89d100> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340af5e40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd340af6540> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36b89c740> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3843e5f40> Operating System
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x7fd36b89cac0> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd340af4c80> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd3840e7000> Operating System
canonical ubuntu_linux 20.04 <built-in method update of dict object at 0x7fd340af4dc0> Operating System
canonical ubuntu_linux 22.04 <built-in method update of dict object at 0x7fd3840e7ec0> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*

References