Yüksek CVSS 7.8 PoC var

CVE-2022-34918: Linux Kernel: güvenlik açığı

Yayın: 5 Temmuz 2022 00:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %5,45 (yüzdelik 93)
CWE: CWE-843
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	4.1	—	4.14.316
linux-linux-kernel	4.15	—	4.19.284
linux-linux-kernel	4.20	—	5.4.244
linux-linux-kernel	5.5	—	5.10.130
linux-linux-kernel	5.11	—	5.15.54
linux-linux-kernel	5.16	—	5.18.11
debian-debian-linux	11.0	11.0	—
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
canonical-ubuntu-linux	20.04	20.04	—
canonical-ubuntu-linux	22.04	22.04	—
netapp-h300s-firmware	—	—	—
netapp-h500s-firmware	—	—	—
netapp-h700s-firmware	—	—	—
netapp-h410s-firmware	—	—	—
netapp-h410c-firmware	—	—	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları