CVE-2022-2588

Description

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

References

https://www.zerodayinitiative.com/advisories/ZDI-22-1117/

https://www.openwall.com/lists/oss-security/2022/08/09/6

https://ubuntu.com/security/notices/USN-5588-1

https://ubuntu.com/security/notices/USN-5582-1

https://ubuntu.com/security/notices/USN-5567-1

https://ubuntu.com/security/notices/USN-5566-1

https://ubuntu.com/security/notices/USN-5565-1

https://ubuntu.com/security/notices/USN-5564-1

https://ubuntu.com/security/notices/USN-5562-1

https://ubuntu.com/security/notices/USN-5560-2

https://ubuntu.com/security/notices/USN-5560-1

https://ubuntu.com/security/notices/USN-5557-1

https://lore.kernel.org/netdev/[email protected]/T/#u

https://github.com/Markakd/CVE-2022-2588

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3