CVE-2022-32250

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2022
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-322519.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentication verification foCVE-2022-322527.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity chCVE-2022-322537.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL cerCVE-2022-322547.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the apCVE-2022-322555.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servicCVE-2022-322566.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servicCVE-2022-322579.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web servicCVE-2022-322587.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older featurCVE-2022-322596.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of tCVE-2022-32267.2An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older thanCVE-2022-322609.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary usCVE-2022-322617.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfigurat
CVE-2022-32250: High severity, CVSS 7.8 | Vulnix