CVEs-PoC/2022/CVE-2022-2586.md

CVE-2022-2586

Description

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

POC

Reference

• https://ubuntu.com/security/notices/USN-5560-2
• https://ubuntu.com/security/notices/USN-5562-1
• https://ubuntu.com/security/notices/USN-5564-1
• https://ubuntu.com/security/notices/USN-5565-1
• https://ubuntu.com/security/notices/USN-5566-1
• https://www.openwall.com/lists/oss-security/2022/08/09/5

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/Snoopy-Sec/Localroot-ALL-CVE
• https://github.com/Trickhish/automated_privilege_escalation
• https://github.com/WhooAmii/POC_to_review
• https://github.com/aels/CVE-2022-2586-LPE
• https://github.com/felixfu59/kernel-hack
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/greek0x0/2022-LPE-UAF
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/kdn111/linux-kernel-exploitation
• https://github.com/khanhdn111/linux-kernel-exploitation
• https://github.com/khanhhdz/linux-kernel-exploitation
• https://github.com/khanhhdz06/linux-kernel-exploitation
• https://github.com/knd06/linux-kernel-exploitation
• https://github.com/konoha279/2022-LPE-UAF
• https://github.com/lockedbyte/lockedbyte
• https://github.com/manas3c/CVE-POC
• https://github.com/ndk191/linux-kernel-exploitation
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/pirenga/2022-LPE-UAF
• https://github.com/sniper404ghostxploit/CVE-2022-2586
• https://github.com/ssr-111/linux-kernel-exploitation
• https://github.com/substing/internal_ctf
• https://github.com/whoforget/CVE-POC
• https://github.com/xairy/linux-kernel-exploitation
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve