{"id":"CVE-2022-32250","revision":"6c948cc9a4ff454ca7255510f4f486e6","records":[{"revision":"6c948cc9a4ff454ca7255510f4f486e6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2022-32250","aliases":[],"title":"net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.","description":"net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.","state":0,"publishedAt":"2022-06-02T20:51:34+00:00","modifiedAt":"2026-10-14T16:53:04.103+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.openwall.com/lists/oss-security/2022/05/31/1","https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd","http://www.openwall.com/lists/oss-security/2022/06/03/1","http://www.openwall.com/lists/oss-security/2022/06/04/1","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6Y3TC4WUUNKRP7OQA26OVTZTPCS6F2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZTJOJCVVEJVOQSCHE6IJQKMPISHQ5L/","https://www.debian.org/security/2022/dsa-5161","https://bugzilla.redhat.com/show_bug.cgi?id=2092427","http://www.openwall.com/lists/oss-security/2022/06/20/1","https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html","http://www.openwall.com/lists/oss-security/2022/07/03/6","http://www.openwall.com/lists/oss-security/2022/07/03/5","https://www.debian.org/security/2022/dsa-5173","https://security.netapp.com/advisory/ntap-20220715-0005/","http://www.openwall.com/lists/oss-security/2022/08/25/1","https://blog.theori.io/research/CVE-2022-32250-linux-kernel-lpe-2022/","https://github.com/theori-io/CVE-2022-32250-exploit","http://www.openwall.com/lists/oss-security/2022/09/02/9"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-32250","license":"CVE Program Terms of Use","key":"cve-program:CVE-2022-32250","identifiers":["CVE-2022-32250"]},"retained":false,"historicalAffected":[]}],"coverage":[]}