CVE-2022-1015

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was found in the Linux kernel in the netfilter subsystem, specifically in the linux/net/netfilter/nf tables api.c file. This issue allows a local user to cause an out-of-bounds write problem. The vulnerability is related to the nf tables module and can be exploited to elevate privileges using unshare(CLONE NEWUSER) or unshare(CLONE NEWNET) calls. The exploit can construct a filter that depends on the value of a kernel address on the stack, leaking the KASLR offset by observing side-effects, and then build a ROP chain to gain root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.