CVE-2022-2586—Linux Kernel Use-After-Free Vulnerability

PUBLISHEDvulnerability record
2024-06-26 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2022-2586
Project:
Linux
Product:
Kernel
Date Added:
2024-06-26
Due Date:
2024-07-17
Last Updated:
June 21, 2025

Vulnerability Name

Linux Kernel Use-After-Free Vulnerability

Description

Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Additional Notes

  • This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131
  • https://nvd.nist.gov/vuln/detail/CVE-2022-2586

Related Weaknesses

browse all CVEs