Vulnerability Description
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
CVSS Score
5.3
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 4.9.326 |
| Canonical | Ubuntu Linux | 14.04 |
Related Weaknesses (CWE)
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588Third Party Advisory
- https://github.com/Markakd/CVE-2022-2588Exploit
- https://lore.kernel.org/netdev/[email protected]/T/Mailing ListPatch
- https://ubuntu.com/security/notices/USN-5557-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5560-2Third Party Advisory
- https://ubuntu.com/security/notices/USN-5562-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5564-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5565-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5566-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5567-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5582-1Third Party Advisory
- https://ubuntu.com/security/notices/USN-5588-1Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/08/09/6Mailing List
- https://www.zerodayinitiative.com/advisories/ZDI-22-1117/Third Party AdvisoryVDB Entry
FAQ
What is CVE-2022-2588?
CVE-2022-2588 is a vulnerability with a CVSS score of 5.3 (MEDIUM). It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
How severe is CVE-2022-2588?
CVE-2022-2588 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-2588?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Canonical Ubuntu Linux.