VDB

CVE-2022-32250

CVE-2022-32250 PUBLISHED

Reported by mitre · Published June 2, 2022

net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.

Affected products

VendorProductVersions
n/an/an/a
amazon:2kernel0
amazon:2023kernel-headers0
amazon:2perf0
amazon:2023kernel-libbpf-static0
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem0
amazon:2023kernel-tools-devel0
n/an/a*
amazon:2kernel-devel0
amazon:2023bpftool0
amazon:2023kernel-libbpf-devel0
amazon:2023kernel-tools0
amazon:2023kernel0
amazon:2023kernel-libbpf0
amazon:2python-perf0
amazon:2023perf0
amazon:2023kernel-devel0
amazon:2kernel-tools-devel0
amazon:2kernel-tools0
amazon:2023kernel-livepatch-6.1.10-15.420

…and 3 more

Timeline

  • Jun 2, 2022 CVE Published
  • Jun 3, 2022 EPSS Score (30 in total, the first dated here)
  • Dec 8, 2023 PoC Published (13 in total, the first dated here)
  • Mar 17, 2026 Distribution Patch (19 in total, the first dated here)
  • Mar 17, 2026 Security Advisory (21 in total, the first dated here)
  • Jun 24, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-32250
vulnetix vdb fixes CVE-2022-32250

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-32250/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›