CVE-2022-2588

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

CVSS v3.0 7.8 HIGH

7.8^/10

CVSS v3.0 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://ubuntu.com/security/notices/USN-5565-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5562-1	Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/09/6	Mailing List
https://ubuntu.com/security/notices/USN-5582-1	Third Party Advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588	Third Party Advisory
https://ubuntu.com/security/notices/USN-5564-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5566-1	Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-1117/	Third Party Advisory VDB Entry
https://ubuntu.com/security/notices/USN-5588-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5560-1	Third Party Advisory
https://github.com/Markakd/CVE-2022-2588	Exploit
https://ubuntu.com/security/notices/USN-5567-1	Third Party Advisory
https://ubuntu.com/security/notices/USN-5560-2	Third Party Advisory
https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u	Mailing List Patch
https://ubuntu.com/security/notices/USN-5557-1	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:18.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts:::

Information

Published : 2024-01-08 18:15

Updated : 2024-01-12 16:47

NVD link : CVE-2022-2588

Mitre link : CVE-2022-2588

JSON object : View

Products Affected

linux

linux_kernel

canonical

ubuntu_linux

CWE

CWE-415

Double Free

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://ubuntu.com/security/notices/USN-5565-1", "name": "https://ubuntu.com/security/notices/USN-5565-1", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5562-1", "name": "https://ubuntu.com/security/notices/USN-5562-1", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://www.openwall.com/lists/oss-security/2022/08/09/6", "name": "https://www.openwall.com/lists/oss-security/2022/08/09/6", "tags": ["Mailing List"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5582-1", "name": "https://ubuntu.com/security/notices/USN-5582-1", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588", "name": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5564-1", "name": "https://ubuntu.com/security/notices/USN-5564-1", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5566-1", "name": "https://ubuntu.com/security/notices/USN-5566-1", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1117/", "name": "https://www.zerodayinitiative.com/advisories/ZDI-22-1117/", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5588-1", "name": "https://ubuntu.com/security/notices/USN-5588-1", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5560-1", "name": "https://ubuntu.com/security/notices/USN-5560-1", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://github.com/Markakd/CVE-2022-2588", "name": "https://github.com/Markakd/CVE-2022-2588", "tags": ["Exploit"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5567-1", "name": "https://ubuntu.com/security/notices/USN-5567-1", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5560-2", "name": "https://ubuntu.com/security/notices/USN-5560-2", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u", "name": "https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u", "tags": ["Mailing List", "Patch"], "refsource": ""}, {"url": "https://ubuntu.com/security/notices/USN-5557-1", "name": "https://ubuntu.com/security/notices/USN-5557-1", "tags": ["Third Party Advisory"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-415"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2022-2588", "ASSIGNER": "security@ubuntu.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}}, "publishedDate": "2024-01-08T18:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.19.17"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2024-01-12T16:47Z"}