Linux kernel netfilter/nf_tables_api.c权限提升漏洞

详细信息

漏洞类型

其他

漏洞描述

在Linux Kernel的net/netfilter/nf_tables_api.c函数中的nf_tables交叉表中发现了一个释放后使用缺陷。此漏洞允许本地特权攻击者在删除表时造成释放后使用问题，可能导致本地特权升级。 此漏洞影响多个操作系统和版本，包括但不限于Alibaba Cloud Linux、OpenHarmony、Amazon Linux、Debian、Fedora、Kylinos、OpenSUSE、Oracle Linux、Red Hat Enterprise Linux、Rocky Linux、SUSE、Ubuntu等，同时影响Siemens SIMATIC S7-1500 TM MFP工控设备。

修复建议

1、有关修补程序、升级或建议的解决方法信息，请参阅Linux Kernel网站。参考链接： 2、对于Siemens设备，有关有关修补程序、升级或建议的解决方法信息，请参考如下链接： https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-166-11

参考链接

• https://access.redhat.com/errata/RHSA-2022:7444

  OSV

• https://access.redhat.com/errata/RHSA-2022:7683

  OSV

• https://access.redhat.com/errata/RHSA-2022:7933

  OSV

• https://access.redhat.com/errata/RHSA-2022:8267

  OSV

• https://access.redhat.com/security/cve/CVE-2020-36516

  OSV

• https://access.redhat.com/security/cve/CVE-2020-36558

  OSV

• https://access.redhat.com/security/cve/CVE-2021-30002

  OSV

• https://access.redhat.com/security/cve/CVE-2021-3640

  OSV

• https://access.redhat.com/security/cve/CVE-2022-0168

  OSV

• https://access.redhat.com/security/cve/CVE-2022-0617

  OSV

• https://access.redhat.com/security/cve/CVE-2022-0854

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1016

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1048

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1055

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1184

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1280

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1353

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1679

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1852

  OSV

• https://access.redhat.com/security/cve/CVE-2022-1998

  OSV

• https://access.redhat.com/security/cve/CVE-2022-20368

  OSV

• https://access.redhat.com/security/cve/CVE-2022-2078

  OSV

• https://access.redhat.com/security/cve/CVE-2022-21123

  OSV

• https://access.redhat.com/security/cve/CVE-2022-21125

  OSV

• https://access.redhat.com/security/cve/CVE-2022-21166

  OSV

• https://access.redhat.com/security/cve/CVE-2022-21499

  OSV

• https://access.redhat.com/security/cve/CVE-2022-23816

  OSV

• https://access.redhat.com/security/cve/CVE-2022-23825

  OSV

• https://access.redhat.com/security/cve/CVE-2022-23960

  OSV

• https://access.redhat.com/security/cve/CVE-2022-24448

  OSV

• https://access.redhat.com/security/cve/CVE-2022-26373

  OSV

• https://access.redhat.com/security/cve/CVE-2022-2639

  OSV

• https://access.redhat.com/security/cve/CVE-2022-27950

  OSV

• https://access.redhat.com/security/cve/CVE-2022-28390

  OSV

• https://access.redhat.com/security/cve/CVE-2022-28893

  OSV

• https://access.redhat.com/security/cve/CVE-2022-2938

  OSV

• https://access.redhat.com/security/cve/CVE-2022-29581

  OSV

• https://access.redhat.com/security/cve/CVE-2022-29900

  OSV

• https://access.redhat.com/security/cve/CVE-2022-29901

  OSV

• https://access.redhat.com/security/cve/CVE-2022-36946

  OSV

• https://access.redhat.com/security/cve/CVE-2022-39190

  OSV

• https://access.redhat.com/security/cve/cve-2022-2586

  OSV

• https://bugzilla.redhat.com/1946279

  OSV

• https://bugzilla.redhat.com/1980646

  OSV

• https://bugzilla.redhat.com/2037386

  OSV

• https://bugzilla.redhat.com/2051444

  OSV

• https://bugzilla.redhat.com/2052312

  OSV

• https://bugzilla.redhat.com/2053632

  OSV

• https://bugzilla.redhat.com/2058395

  OSV

• https://bugzilla.redhat.com/2059928

  OSV

• https://bugzilla.redhat.com/2062284

  OSV

• https://bugzilla.redhat.com/2066614

  OSV

• https://bugzilla.redhat.com/2066706

  OSV

• https://bugzilla.redhat.com/2066819

  OSV

• https://bugzilla.redhat.com/2069408

  OSV

• https://bugzilla.redhat.com/2070205

  OSV

• https://bugzilla.redhat.com/2070220

  OSV

• https://bugzilla.redhat.com/2071022

  OSV

• https://bugzilla.redhat.com/2073064

  OSV

• https://bugzilla.redhat.com/2074208

  OSV

• https://bugzilla.redhat.com/2084125

  OSV

• https://bugzilla.redhat.com/2084183

  OSV

• https://bugzilla.redhat.com/2084479

  OSV

• https://bugzilla.redhat.com/2088021

  OSV

• https://bugzilla.redhat.com/2089815

  OSV

• https://bugzilla.redhat.com/2090226

  OSV

• https://bugzilla.redhat.com/2090237

  OSV

• https://bugzilla.redhat.com/2090240

  OSV

• https://bugzilla.redhat.com/2090241

  OSV

• https://bugzilla.redhat.com/2096178

  OSV

• https://bugzilla.redhat.com/2103148

  OSV

• https://bugzilla.redhat.com/2103153

  OSV

• https://bugzilla.redhat.com/2112693

  OSV

• https://bugzilla.redhat.com/2114878

  OSV

• https://bugzilla.redhat.com/2115065

  OSV

• https://bugzilla.redhat.com/2115278

  OSV

• https://bugzilla.redhat.com/2120175

  OSV

• https://bugzilla.redhat.com/2123695

  OSV

• https://bugzilla.redhat.com/2129152

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=1946279

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=1948442

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=1977993

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=1978539

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=1980646

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2004037

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2019942

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2037386

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2037769

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2042424

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2044837

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2051444

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2053632

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2056383

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2058369

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2058395

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2059928

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2062284

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2062780

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2066614

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2066706

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2066976

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2069408

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2069472

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2070205

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2070220

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2072552

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2073064

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2074208

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2074317

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2080095

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2084183

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2084479

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2088021

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2089815

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2090940

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2091539

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2096178

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2100259

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2107594

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2109327

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2112693

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2114577

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2114878

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2115065

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2115278

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2120175

  OSV

• https://bugzilla.redhat.com/show_bug.cgi?id=2123695

  OSV

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586

  CVE · issue-tracking

• https://errata.almalinux.org/8/ALSA-2022-7444.html

  OSV

• https://errata.almalinux.org/8/ALSA-2022-7683.html

  OSV

• https://errata.almalinux.org/9/ALSA-2022-7933.html

  OSV

• https://errata.almalinux.org/9/ALSA-2022-8267.html

  OSV

• https://errata.rockylinux.org/RLSA-2022:7444

  OSV

• https://errata.rockylinux.org/RLSA-2022:7683

  OSV

• https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t

  CVE · issue-tracking

• https://osv.dev/vulnerability/ALSA-2022:7444

  OSV

• https://osv.dev/vulnerability/ALSA-2022:7683

  OSV

• https://osv.dev/vulnerability/ALSA-2022:7933

  OSV

• https://osv.dev/vulnerability/ALSA-2022:8267

  OSV

• https://osv.dev/vulnerability/DLA-3102-1

  OSV

• https://osv.dev/vulnerability/DLA-3131-1

  OSV

• https://osv.dev/vulnerability/DSA-5207-1

  OSV

• https://osv.dev/vulnerability/RLSA-2022:7444

  OSV

• https://osv.dev/vulnerability/RLSA-2022:7683

  OSV

• https://ubuntu.com/security/notices/USN-5557-1

  CVE · third-party-advisory

• https://ubuntu.com/security/notices/USN-5560-1

  CVE · third-party-advisory

• https://ubuntu.com/security/notices/USN-5560-2

  CVE · third-party-advisory

• https://ubuntu.com/security/notices/USN-5562-1

  CVE · third-party-advisory

• https://ubuntu.com/security/notices/USN-5564-1

  CVE · third-party-advisory

• https://ubuntu.com/security/notices/USN-5565-1

  CVE · third-party-advisory

• https://ubuntu.com/security/notices/USN-5566-1

  CVE · third-party-advisory

• https://ubuntu.com/security/notices/USN-5567-1

  CVE · third-party-advisory

• https://ubuntu.com/security/notices/USN-5582-1

  CVE · third-party-advisory

• https://www.openwall.com/lists/oss-security/2022/08/09/5

  CVE · issue-tracking

• https://www.zerodayinitiative.com/advisories/ZDI-22-1118/

  CVE · issue-tracking

• https://ubuntu.com/security/CVE-2022-2586

  OSV

• https://www.cve.org/CVERecord?id=CVE-2022-2586

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-2586

  OSV

• https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586

  OSV · Exploit · Third Party Advisory

• https://security-tracker.debian.org/tracker/CVE-2022-2586

  OSV

• https://osv.dev/vulnerability/CVE-2022-2586

  OSV

• https://osv.dev/vulnerability/DEBIAN-CVE-2022-2586

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586

  NVD · US Government Resource