CVEs-PoC/2022/CVE-2022-2586.md

CVE-2022-2586

Description

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

POC

Reference

• https://ubuntu.com/security/notices/USN-5560-1
• https://ubuntu.com/security/notices/USN-5560-2
• https://ubuntu.com/security/notices/USN-5562-1
• https://ubuntu.com/security/notices/USN-5564-1
• https://ubuntu.com/security/notices/USN-5565-1
• https://ubuntu.com/security/notices/USN-5566-1
• https://ubuntu.com/security/notices/USN-5582-1
• https://www.openwall.com/lists/oss-security/2022/08/09/5
• https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586

Github

• https://github.com/0xor0ne/awesome-list
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ChalkingCode/ExploitedDucks
• https://github.com/Faizan-Khanx/PYTHA-SHELL
• https://github.com/HaxorSecInfec/autoroot.sh
• https://github.com/Jalexander798/JA_Tools-Cybersecurity-Resource-2
• https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/Snoopy-Sec/Localroot-ALL-CVE
• https://github.com/Trickhish/automated_privilege_escalation
• https://github.com/WatPow/marine-ctf
• https://github.com/WhooAmii/POC_to_review
• https://github.com/a-roshbaik/Linux-Privilege-Escalation-Exploits
• https://github.com/aels/CVE-2022-2586-LPE
• https://github.com/ahmmmeeedsherif/Linux-Privilege-Escalation-Enumeration
• https://github.com/bachkhoasoft/awesome-list-ks
• https://github.com/felixfu59/kernel-hack
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/greek0x0/2022-LPE-UAF
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/kdn111/linux-kernel-exploitation
• https://github.com/khanhdn111/linux-kernel-exploitation
• https://github.com/khanhhdz/linux-kernel-exploitation
• https://github.com/khanhhdz06/linux-kernel-exploitation
• https://github.com/khnhdz/linux-kernel-exploitation
• https://github.com/knd06/linux-kernel-exploitation
• https://github.com/konoha279/2022-LPE-UAF
• https://github.com/lockedbyte/lockedbyte
• https://github.com/manas3c/CVE-POC
• https://github.com/ndk06/linux-kernel-exploitation
• https://github.com/ndk191/linux-kernel-exploitation
• https://github.com/nisadevi11/Localroot-ALL-CVE
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/pirenga/2022-LPE-UAF
• https://github.com/plzheheplztrying/cve_monitor
• https://github.com/sniper404ghostxploit/CVE-2022-2586
• https://github.com/ssr-111/linux-kernel-exploitation
• https://github.com/substing/internal_ctf
• https://github.com/vlain1337/auto-lpe
• https://github.com/whoforget/CVE-POC
• https://github.com/wkhnh06/linux-kernel-exploitation
• https://github.com/xairy/linux-kernel-exploitation
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve