CVE-2022-2078

MediumCVSS 5.5/10Last modified Oct 14, 2026

Description

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121 CWE-120

Affected software

Vendor	Product	Versions
n/a	kernel	kernel 5.19 rc1
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1

References

https://bugzilla.redhat.com/show_bug.cgi?id=2096178Issue Tracking, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85Mailing List, Patch, Vendor Advisory
https://www.debian.org/security/2022/dsa-5161Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2096178Issue Tracking, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85Mailing List, Patch, Vendor Advisory
https://www.debian.org/security/2022/dsa-5161Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Timeline

Published: Jun 30, 2022
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-207807.4Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual ma CVE-2022-207815.4A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authen CVE-2022-207826.5A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker CVE-2022-207837.5A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software CVE-2022-207845.3A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow CVE-2022-207857.5On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was discl CVE-2022-207868.1A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P CVE-2022-207876.8A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Ses CVE-2022-207886.1A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Managem CVE-2022-207896.5A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manage CVE-2022-20795.4Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+.CVE-2022-207906.5A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications