CVE-2022-2588

Summary

CVE	CVE-2022-2588
State	PUBLISHED
Assigner	canonical
Source Priority	CVE Program / NVD first with legacy fallback
Published	2024-01-08 18:15:44 UTC
Updated	2026-10-14 14:17:21 UTC
Description	It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from [email protected]

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem Types: CWE-416 | CWE-415 | CWE-416 CWE-416

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	7.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	[email protected]	Secondary	5.3	MEDIUM	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H`
3.1	CNA	CVSS	5.3	MEDIUM	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H`

CVSS v3.1 Breakdown

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	The Linux Kernel Organization	Linux	affected 6.0~rc1 semver	Linux
ADP	Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem	affected V1.1 custom	Not specified

References

Reference	Source	Link	Tags
USN-5567-1: Linux kernel (OEM) vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
ZDI-22-1117 \| Zero Day Initiative	af854a3a-2127-422b-91ae-364da2661108	www.zerodayinitiative.com	Third Party Advisory, VDB Entry
USN-5564-1: Linux kernel (Intel IoTG) vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-831302.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
USN-5560-2: Linux kernel vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
USN-5562-1: Linux kernel vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
USN-5582-1: Linux kernel (Azure CVM) vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-769027.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
USN-5588-1: Linux kernel vulnerability \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
USN-5565-1: Linux kernel vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-419740.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
CVE - CVE-2022-2588	af854a3a-2127-422b-91ae-364da2661108	cve.mitre.org	Third Party Advisory
USN-5566-1: Linux kernel vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-794697.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
[PATCH] net_sched: cls_route: remove from list when handle is 0	af854a3a-2127-422b-91ae-364da2661108	lore.kernel.org	Mailing List, Patch
oss-security - CVE-2022-2588 - Linux kernel cls_route UAF	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com	Mailing List
USN-5560-1: Linux kernel vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
GitHub - Markakd/CVE-2022-2588: exploit for CVE-2022-2588	af854a3a-2127-422b-91ae-364da2661108	github.com	Exploit
USN-5557-1: Linux kernel vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	ubuntu.com	Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Discovery Credit

CNA: Zhenpeng Lin working with Trend Micro's Zero Day Initiative (en)

Legacy QID Mappings

160029 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9693)
160030 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9689)
160031 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9694)
160032 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9691)
160034 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9699)
160035 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9692)
160036 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9690)
160043 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9709)
160045 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9710)
160076 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9761)
160098 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9787)
160099 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9788)
160106 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9827)
160109 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2022-9830)
160171 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-7110)
160199 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-7337)
180938 Debian Security Update for linux (DSA 5207-1)
181002 Debian Security Update for linux-5.10 (DLA 3102-1)
181091 Debian Security Update for linux (DLA 3131-1)
184842 Debian Security Update for linux (CVE-2022-2588)
198891 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5560-1)
198892 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5567-1)
198894 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5566-1)
198895 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5562-1)
198896 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5565-1)
198897 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-5564-1)
198911 Ubuntu Security Notification for Linux kernel (Azure CVM) Vulnerabilities (USN-5582-1)
240734 Red Hat Update for kernel-rt (RHSA-2022:6991)
240737 Red Hat Update for kpatch-patch (RHSA-2022:6978)
240738 Red Hat Update for kernel security (RHSA-2022:6983)
240776 Red Hat Update for kernel-rt (RHSA-2022:7134)
240782 Red Hat Update for kernel security (RHSA-2022:7110)
240783 Red Hat Update for kpatch-patch (RHSA-2022:7137)
240799 Red Hat Update for kernel-rt (RHSA-2022:7280)
240805 Red Hat Update for kpatch-patch (RHSA-2022:7344)
240807 Red Hat Update for kernel (RHSA-2022:7337)
240811 Red Hat Update for kernel-rt (RHSA-2022:7338)
241781 Red Hat Update for kernel (RHSA-2023:4022)
241782 Red Hat Update for kpatch-patch (RHSA-2023:4023)
283034 Fedora Security Update for kernel (FEDORA-2022-9bbb1d9b7b)
283035 Fedora Security Update for kernel (FEDORA-2022-484e226872)
354053 Amazon Linux Security Advisory for kernel : ALAS2-2022-1838
354060 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-035
354071 Amazon Linux Security Advisory for kernel : ALAS-2022-1636
354075 Amazon Linux Security Advisory for kernel : ALAS2-2022-1852
354081 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-036
354082 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2022-008
354084 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-020
354238 Amazon Linux Security Advisory for kernel-livepatch : ALAS2LIVEPATCH-2022-094
354240 Amazon Linux Security Advisory for kernel-livepatch : ALAS2LIVEPATCH-2022-093
354439 Amazon Linux Security Advisory for kernel : ALAS2022-2022-150
354468 Amazon Linux Security Advisory for kernel : ALAS2022-2022-185
354542 Amazon Linux Security Advisory for kernel : ALAS-2022-185
355199 Amazon Linux Security Advisory for kernel : ALAS2023-2023-070
377117 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2022:0158)
377685 F5 BIG-IP Linux kernel vulnerability cve-2022-2588 (K32615023)
377766 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2022:0049)
377871 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2023:0001)
377891 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0002)
390263 Oracle Managed Virtualization (VM) Server for x86 Security Update for kernel (OVMSA-2022-0022)
390267 Oracle VM Server for x86 Security Update for kernel (OVMSA-2022-0024)
6140125 AWS Bottlerocket Security Update for kernel (GHSA-gwgw-pm3x-5wxg)
672141 EulerOS Security Update for kernel (EulerOS-SA-2022-2441)
672205 EulerOS Security Update for kernel (EulerOS-SA-2022-2466)
672278 EulerOS Security Update for kernel (EulerOS-SA-2022-2686)
672286 EulerOS Security Update for kernel (EulerOS-SA-2022-2654)
672354 EulerOS Security Update for kernel (EulerOS-SA-2022-2732)
672391 EulerOS Security Update for kernel (EulerOS-SA-2022-2767)
752584 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3265-1)
752589 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3264-1)
752591 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3274-1)
752592 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3282-1)
752594 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3293-1)
752596 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3291-1)
752615 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3408-1)
752632 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3450-1)
752814 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (SUSE-SU-2022:4112-1)
752831 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 31 for SLE 15) (SUSE-SU-2022:4027-1)
752850 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 1 for SLE 15 SP4) (SUSE-SU-2022:4035-1)
752852 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 16 for SLE 15 SP3) (SUSE-SU-2022:4100-1)
752874 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (SUSE-SU-2022:4024-1)
752875 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 2 for SLE 15 SP4) (SUSE-SU-2022:4039-1)
752894 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 22 for SLE 15 SP3) (SUSE-SU-2022:4033-1)
752902 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 30 for SLE 15) (SUSE-SU-2022:4129-1)
752904 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 23 for SLE 15 SP3) (SUSE-SU-2022:4034-1)
752915 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (SUSE-SU-2022:4030-1)
752930 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 0 for SLE 15 SP4) (SUSE-SU-2022:4113-1)
753063 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4617-1)
753167 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3288-1)
753370 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3609-1)
753374 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3809-1)
940709 AlmaLinux Security Update for kernel-rt (ALSA-2022:7134)
940719 AlmaLinux Security Update for kernel (ALSA-2022:7110)
960271 Rocky Linux Security Update for kernel-rt (RLSA-2022:7134)
960397 Rocky Linux Security Update for kernel (RLSA-2022:7110)