ZeroDay Findings
Sign inSign up

Findings

CVE-2022-2586

Linux Kernel Use-After-Free Vulnerability

Published Jan 8, 2024 · updated Aug 20, 2026 · linux linux kernel

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 8, 2024 · Catalog

    Detected

    It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

  2. Jun 26, 2024 · CISA KEV

    Known exploited

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  3. Jul 17, 2024 · CISA KEV

    Remediation due

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  4. Aug 20, 2026 · Catalog

    Updated

    It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

CISA due date Jul 17, 2024

Affected

  • cpe canonical/ubuntu linux14.04
  • cpe linux/linux kernelversion unspecified
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVCVE-2022-2586

    Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

    cisa.gov
  • CVE.orgCVE-2022-2586

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2022-2586

    30-day exploitation probability 10.2%

    first.org
  • NIST NVDCVE-2022-2586

    It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

    nvd.nist.gov

References