CVE-2022-2586

Linux Kernel Use-After-Free Vulnerability

Published Jan 8, 2024 · updated Oct 14, 2026 · siemens simatic s7-1500 tm mfp firmware

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Timeline

Detection, updates, and resolution for this record.

Jan 8, 2024 · Catalog
Detected
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
Jun 26, 2024 · CISA KEV
Known exploited
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Jul 17, 2024 · CISA KEV
Remediation due
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Aug 20, 2026 · Catalog
Updated
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
Oct 14, 2026 · NIST NVD
Updated
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
Oct 14, 2026 · NIST NVD
Updated
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

CISA due date Jul 17, 2024

Affected

cpe canonical/ubuntu linux14.04
cpe linux/linux kernelversion unspecified
cpe siemens/simatic s7-1500 tm mfp firmwareversion unspecified
cpe siemens/sinec osversion unspecified
vendor Linux Kernelversion unspecified

Sources

CISA KEVCVE-2022-2586
Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.
cisa.gov
CVE.orgCVE-2022-2586
Official CVE identifier
cve.org
FIRST EPSSCVE-2022-2586
30-day exploitation probability 10.2%
first.org
NIST NVDCVE-2022-2586
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
nvd.nist.gov