CVE-2022-25636

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.4 through 5.6.10

Description The issue is related to a heap out-of-bounds write in the netfilter subsystem of the Linux kernel, specifically in the nf dup netdev.c file. This can allow local users to gain privileges or cause a denial of service. The problem is related to nf tables offload. A researcher managed to hijack the kernel control flow, and an example exploit allows a local user to elevate their privileges in Ubuntu 21.10 with the KASLR protection mechanism disabled.

Recommendations For Linux kernel versions 5.4 through 5.6.10, consider applying the available patch to fix the issue. As a temporary workaround, restrict access to the vulnerable nf tables offload functionality to minimize the risk of exploitation.