Main
Vulnerability Database
Exploits
ID:9950 - Exploit for Heap-based buffer overflow in Linux kernel - CVE-2022-25636
ID:9950 - Exploit for Heap-based buffer overflow in Linux kernel - CVE-2022-25636
Published: June 7, 2024
Vulnerability identifier: #VU61271
Vulnerability risk: Low
CVE-ID: CVE-2022-25636
CWE-ID: CWE-122
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error in net/netfilter/nf_dup_netdev.c in the Linux kernel, related to nf_tables_offload. A local user can trigger a heap-based buffer overflow and execute arbitrary code with elevated privileges.
Remediation
Install updates from vendor's website.