Linux Kernel Use-After-Free Vulnerability

北京赛克艾威科技有限公司 2024-06-26


  • 漏洞编号:CVE-2022-2586
  • 漏洞等级:严重
  • 漏洞标签:Linux、Kernel、在野利用
  • 发布时间:2024-06-26

漏洞描述

Linux Kernel contains a use\\-after\\-free vulnerability in the nft\\_object, allowing local attackers to escalate privileges.

修复建议

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

参考链接

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131

https://www.cisa.gov/known-exploited-vulnerabilities-catalog