Live › vulnerability › CVE-2022-2586
Go to dashboardA use-after-free bug in the Linux kernel's nft_object code (nf_tables) lets a local user corrupt kernel memory. An attacker with a local shell can escalate privileges to root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| siemens simatic s7-1500 tm mfp firmware | vendor | < 1.1 | 1.1 |
| siemens sinec os | vendor | < 2.4 | 2.4 |
| linux kernel | vendor | >= 3.16, < 4.14.316 | 4.14.316 |
| linux kernel | vendor | >= 4.15, < 4.19.256 | 4.19.256 |
| linux kernel | vendor | >= 4.20, < 5.4.211 | 5.4.211 |
| linux kernel | vendor | >= 5.5, < 5.10.137 | 5.10.137 |
| linux kernel | vendor | >= 5.11, < 5.15.61 | 5.15.61 |
| linux kernel | vendor | >= 5.16, < 5.18.18 | 5.18.18 |
| linux kernel | vendor | >= 5.19, < 5.19.2 | 5.19.2 |
| canonical ubuntu linux | vendor | = 14.04 | – |
| canonical ubuntu linux | vendor | = 16.04 | – |
| canonical ubuntu linux | vendor | = 18.04 | – |
| canonical ubuntu linux | vendor | = 20.04 | – |
| canonical ubuntu linux | vendor | = 22.04 | – |
| Linux Kernel | vendor | – | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.
CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2022-2586")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.