CVE-2022-34918

Aliases:UBUNTU-CVE-2022-34918DEBIAN-CVE-2022-34918
Advisory lineage Upstream: 0 Downstream: 36
Modified
Published: 04 Jul 2022, 20:07
Last modified:03 Aug 2024, 09:22

Vulnerability Summary

Overall Risk (default)
medium
42/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
5.5% LOW
5% probability -32.44%
KEV
Not listed
Ransomware
No reports
Public exploits
5 found
Dark Web
Not detected

Timeline

04 Jul 2022, 20:07
Published
Vulnerability first disclosed
03 Aug 2024, 09:22
Last Modified
Vulnerability information updated

Description

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 5.50%• Percentile: 92%

Techniques & Countermeasures

  • CWE-843•Access of Resource Using Incompatible Type ('Type Confusion')

    The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04 | 20.04 | 22.04

  • debian•linux

    < 5.10.127-2 | < 5.18.14-1 | < 5.18.14-1 | < 5.18.14-1

  • ubuntu•linux

    < 4.4.0-230.264 | < 4.15.0-191.202 | < 5.4.0-124.140 | < 5.15.0-43.46

  • ubuntu•linux-aws

    < 4.4.0-1110.116 | < 4.4.0-1146.161 | < 4.15.0-1139.150 | < 5.4.0-1083.90 | < 5.15.0-1017.21

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.15

    < 5.15.0-1017.21~20.04.1

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1083.90~18.04.1

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-fips

    < 4.15.0-2078.83 | all | < 5.4.0-1083.90+fips1

  • ubuntu•linux-aws-hwe

    < 4.15.0-1139.150~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1149.164~14.04.1 | < 4.15.0-1149.164~16.04.1 | all | < 5.4.0-1089.94 | < 5.15.0-1017.20

  • ubuntu•linux-azure-4.15

    < 4.15.0-1149.164

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.15

    < 5.15.0-1017.20~20.04.1

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1089.94~18.04.1

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fips

    < 4.15.0-2059.65 | all | < 5.4.0-1089.94+fips1

  • ubuntu•linux-bluefield

    all | < 5.4.0-1044.49

  • ubuntu•linux-dell300x

    < 4.15.0-1051.56

  • ubuntu•linux-fips

    < 4.4.0-1080.87 | all | < 4.15.0-1096.107 | < 5.4.0-1059.67

  • ubuntu•linux-gcp

    < 4.15.0-1134.150~16.04.2 | all | < 5.4.0-1086.94 | < 5.15.0-1016.21

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1134.150

  • ubuntu•linux-gcp-5.11

    all

  • ubuntu•linux-gcp-5.13

    all

  • ubuntu•linux-gcp-5.15

    < 5.15.0-1016.21~20.04.1

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1086.94~18.04.1

  • ubuntu•linux-gcp-5.8

    all

  • ubuntu•linux-gcp-fips

    < 4.15.0-2043.48 | all | < 5.4.0-1086.94+fips1

  • ubuntu•linux-gke

    < 5.4.0-1080.86 | < 5.15.0-1014.17

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.15

    < 5.15.0-1014.17~20.04.1

  • ubuntu•linux-gke-5.4

    < 5.4.0-1080.86~18.04.1

  • ubuntu•linux-gkeop

    < 5.4.0-1051.54 | < 5.15.0-1002.4

  • ubuntu•linux-gkeop-5.4

    < 5.4.0-1051.54~18.04.1

  • ubuntu•linux-hwe

    < 4.15.0-191.202~16.04.1 | all

  • ubuntu•linux-hwe-5.11

    all

  • ubuntu•linux-hwe-5.13

    all

  • ubuntu•linux-hwe-5.15

    < 5.15.0-43.46~20.04.1

  • ubuntu•linux-hwe-5.4

    < 5.4.0-124.140~18.04.1

  • ubuntu•linux-hwe-5.8

    all

  • ubuntu•linux-hwe-edge

    all | all

  • ubuntu•linux-ibm

    < 5.4.0-1031.35 | < 5.15.0-1012.14

  • ubuntu•linux-ibm-5.4

    < 5.4.0-1031.35~18.04.1

Showing first 50 affected entries in server-rendered view.

References (23)