CVE-2022-25636: debian debian_linux Improper Privilege Management
Vulnerability summary
CVE-2022-25636 is a high (CVSS 7.8) Improper Privilege Management vulnerability in debian debian_linux. EPSS estimates a 2.63% chance of exploitation in the next 30 days, higher than 85.5% of scored vulnerabilities. 3 public exploits are recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 23 · Related 12Timeline
- 22-02-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.63%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 2.61% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
3 foundCve 2022 25636
Maturity: poc
Exploit Reference (openwall.com)
Maturity: unknown
Exploit Reference (nickgregory.me)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu63 products
- linux< 5.4.0-104.118
- linux-aws< 5.4.0-1068.72
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13< 5.13.0-1017.19~20.04.1
Oracle3 products
Debian2 products
- linux< 5.16.11-1
- debian_linuxEOL11.0
Linux1 product
- linux_kernel≥ 5.4, < 5.4.182 | ≥ 5.5, < 5.10.103 | ≥ 5.11, < 5.15.26 | ≥ 5.16, < 5.16.12
5 vendors · 77 products
References
15 links- www.openwall.com/lists/oss-security/2022/02/21/2X Refsource MISCREPORTExploitMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2022/02/22/1Mailing ListX Refsource MLISTPatchThird Party Advisory
- packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.htmlX Refsource MISCThird Party AdvisoryVDB Entry