CVE-2022-2078
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat…
Published Jun 30, 2022 · updated Oct 14, 2026 · linux linux kernel
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Jun 30, 2022 · NIST NVD
Detected
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
Oct 14, 2026 · NIST NVD
Updated
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
Affected
- cpe debian/debian linux11.0
- cpe linux/linux kernelversion unspecified
- cpe redhat/enterprise linux8.0
- cpe redhat/enterprise linux9.0
- cpe redhat/virtualization4.0
Sources
- CVE.orgVulnerability recordCVE-2022-2078
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-2078
30-day exploitation probability 1.1%
first.org - NIST NVDVulnerability recordCVE-2022-2078
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
nvd.nist.gov