← Back

CVE-2022-1016

nvd nist
Published: Aug 29, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.

Affected (5)

Linux
1 product
Linux Kernel
Redhat
1 product
Enterprise Linux
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
Up to 3.12
Linux Kernel
From 3.13 to 5.17
Linux Kernel
Version 3.13 rc1
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux
Version 8.0
Enterprise Linux
Version 9.0

Related CWEs

CWE-824
Access of Uninitialized Pointer
The product accesses or uses a pointer that has not been initialized.
CWE-909
Missing Initialization of Resource
The product does not initialize a critical resource.

References (8)

Source: secalert@redhat.com
ExploitThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue TrackingThird Party Advisory
Source: secalert@redhat.com
ExploitMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing ListThird Party Advisory

Timeline

No history available yet.