CVE-2022-2586: Linux Kernel Use-After-Free Vulnerability
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
Published Jan 8, 2024 · Updated Oct 14, 2026
Required action
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Advisory details
From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
- https://lore.kernel.org/netfilter-devel/[email protected]/T/#t
- https://ubuntu.com/security/notices/USN-5557-1
- https://ubuntu.com/security/notices/USN-5560-1
- https://ubuntu.com/security/notices/USN-5560-2
- https://ubuntu.com/security/notices/USN-5562-1
- https://ubuntu.com/security/notices/USN-5564-1
- https://ubuntu.com/security/notices/USN-5565-1
- https://ubuntu.com/security/notices/USN-5566-1
- https://ubuntu.com/security/notices/USN-5567-1
- https://ubuntu.com/security/notices/USN-5582-1
- https://www.openwall.com/lists/oss-security/2022/08/09/5
- https://www.zerodayinitiative.com/advisories/ZDI-22-1118/
- https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Linux vulnerabilities
All Linux entriesCVE-2026-53362
Linux Kernel Unspecified Vulnerability
high7.8ExploitedJul 4, 2026CVE-2026-53266
Linux Kernel Out-of-Bounds Write Vulnerability
high8.8ExploitedJun 25, 2026CVE-2026-31431
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
high7.8ExploitedApr 22, 2026CVE-2025-39964
Linux Kernel Race Condition Vulnerability
medium5.5ExploitedOct 13, 2025CVE-2025-39682
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
critical9.8ExploitedSep 5, 2025CVE-2025-38352
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
high7.8ExploitedJul 22, 2025