Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 13 products
Starting with a write up on a netfilter bug (CVE-2022-32250) exploited in Pwn2Own Vancouver 2022 and an Arm Mali GPU UAF
Post summary
The passage references a write‑up on CVE-2022-32250, noting it was exploited during Pwn2Own Vancouver 2022, but provides no PoC, patch, or detailed technical information.
15 of 15 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 10.0 | - | - |
| OS | debian | debian_linux | 9.0 | - | - |
| OS | fedoraproject | fedora | 35 | - | - |
| OS | fedoraproject | fedora | 36 | - | - |
| OS | linux | linux_kernel | - | - | - |
| HW | netapp | h300s | - | - | - |
| OS | netapp | h300s_firmware | - | - | - |
| HW | netapp | h410c | - | - | - |
| OS | netapp | h410c_firmware | - | - | - |
| HW | netapp | h410s | - | - | - |
| OS | netapp | h410s_firmware | - | - | - |
| HW | netapp | h500s | - | - | - |
| OS | netapp | h500s_firmware | - | - | - |
| HW | netapp | h700s | - | - | - |
| OS | netapp | h700s_firmware | - | - | - |