Strix
26.1K

CVE-2022-34918

HIGHCVSS 7.8/10EPSS 5.13%

Last modified

CVE-2022-34918 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. EPSS estimates a 5.13% chance of exploitation in the next 30 days.

Description

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
5.13%

91.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
LinuxLinux Kernel>= 4.1, < 4.14.316
LinuxLinux Kernel>= 4.15, < 4.19.284
LinuxLinux Kernel>= 4.20, < 5.4.244
LinuxLinux Kernel>= 5.5, < 5.10.130
LinuxLinux Kernel>= 5.11, < 5.15.54
LinuxLinux Kernel>= 5.16, < 5.18.11
DebianDebian Linux11.0
CanonicalUbuntu Linux14.04
CanonicalUbuntu Linux16.04
CanonicalUbuntu Linux18.04
CanonicalUbuntu Linux20.04
CanonicalUbuntu Linux22.04
NetappH300s FirmwareAll versions
NetappH500s FirmwareAll versions
NetappH700s FirmwareAll versions
NetappH410s FirmwareAll versions
NetappH410c FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-34918?
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
How severe is CVE-2022-34918?
CVE-2022-34918 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 5.13% probability of exploitation in the next 30 days.
How do I fix CVE-2022-34918?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-34918?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST