It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
Medium CVSS 5.3
Summary
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 Third Party Advisory
- https://github.com/Markakd/CVE-2022-2588 Exploit
- https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u Mailing List
- https://ubuntu.com/security/notices/USN-5557-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-2 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5562-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5564-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5565-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5566-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5567-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5582-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5588-1 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/08/09/6 Mailing List
- https://www.zerodayinitiative.com/advisories/ZDI-22-1117/ Third Party Advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 Third Party Advisory
- https://github.com/Markakd/CVE-2022-2588 Exploit
- https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u Mailing List
- https://ubuntu.com/security/notices/USN-5557-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-2 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5562-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5564-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5565-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5566-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5567-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5582-1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5588-1 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/08/09/6 Mailing List
- https://www.zerodayinitiative.com/advisories/ZDI-22-1117/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-419740.html
- https://cert-portal.siemens.com/productcert/html/ssa-769027.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html
Timeline
- nvd_ingest NVD