Dashboard / CVE-2022-2586

CVE-2022-2586

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 2/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

CISA Known Exploited Vulnerability

Vendor / Product Linux — Kernel
Date Added 2024-06-26
Remediation Due 2024-07-17
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131; https://nvd.nist.gov/vuln/detail/CVE-2022-2586

Weakness Classification (1)

Affected Software (14)

VendorProductVersion
canonical ubuntu_linux 14.04
canonical ubuntu_linux 16.04
canonical ubuntu_linux 18.04
canonical ubuntu_linux 20.04
canonical ubuntu_linux 22.04
linux linux_kernel 3.16 – 4.14.316
linux linux_kernel 4.15 – 4.19.256
linux linux_kernel 4.20 – 5.4.211
linux linux_kernel 5.5 – 5.10.137
linux linux_kernel 5.11 – 5.15.61
linux linux_kernel 5.16 – 5.18.18
linux linux_kernel 5.19 – 5.19.2
siemens simatic_s7-1500_tm_mfp_firmware < 1.1
siemens sinec_os < 2.4

References & Advisories (17)

Bug Bounty Relevance

2 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

10.20%
Raw Score 0.102020
Percentile 95.7%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links