CVE-2022-2586
high CISA KEVLinux Kernel Use-After-Free Vulnerability
Vendor / product: Linux — Kernel
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
CVSS
7.8
7.8 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-01-08 18:15
Modified: 2026-10-14 18:25
NVD status: Analyzed
Last synced 2 days ago
Verified against the source API 2026-10-27 07:07 UTC
Exploitation
Listed in CISA KEV
Added 2024-06-26 · due 2024-07-17
Known ransomware use: Unknown
Required action (CISA)
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Affected products
siemens / simatic_s7-1500_tm_mfp_firmware <1.1
siemens / sinec_os <2.4
linux / linux_kernel ≥3.16 <4.14.316, ≥4.15 <4.19.256, ≥4.20 <5.4.211, ≥5.5 <5.10.137, ≥5.11 <5.15.61, ≥5.16 <5.18.18
canonical / ubuntu_linux 14.04, 16.04, 18.04, 20.04, 22.04
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586 security@ubuntu.com
- https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#... security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5557-1 security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5560-1 security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5560-2 security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5562-1 security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5564-1 security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5565-1 security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5566-1 security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5567-1 security@ubuntu.com
- https://ubuntu.com/security/notices/USN-5582-1 security@ubuntu.com
- https://www.openwall.com/lists/oss-security/2022/08/09/5 security@ubuntu.com
- https://www.zerodayinitiative.com/advisories/ZDI-22-1118/ security@ubuntu.com
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586 af854a3a-2127-422b-91ae-364da2661108
- https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#... af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5557-1 af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5560-1 af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5560-2 af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5562-1 af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5564-1 af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5565-1 af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5566-1 af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5567-1 af854a3a-2127-422b-91ae-364da2661108
- https://ubuntu.com/security/notices/USN-5582-1 af854a3a-2127-422b-91ae-364da2661108
- https://www.openwall.com/lists/oss-security/2022/08/09/5 af854a3a-2127-422b-91ae-364da2661108
Data sources
CISA KEV — fetched 2026-10-27 06:50 UTC · record ↗
NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗