CVE Watch—

CVE-2022-2586

Linux Kernel Use-After-Free Vulnerability

CVSS

—

No CVSS

EPSS

12.7%

p96

KEV

YES

Jun 26, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

12.7%EPSS · 30 days12.7%

2026-06-302026-07-16

KEV catalog record

Product

Linux / Kernel

Vulnerability

Linux Kernel Use-After-Free Vulnerability

Added to KEV

Jun 26, 2024

Remediate by

Jul 17, 2024

Known ransomware use

Summary description

Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Notes

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131; https://nvd.nist.gov/vuln/detail/CVE-2022-2586

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-314317.8 HIG

99.9%

KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability3d CVE-2022-0847—

99.8%

KEV—80Linux Kernel Privilege Escalation Vulnerability—CVE-2016-5195—

99.7%

KEV—80Linux Kernel Race Condition Vulnerability—CVE-2021-22555—

99.5%

KEV—80Linux Kernel Heap Out-of-Bounds Write Vulnerability—CVE-2019-13272—

98.8%

KEV—80Linux Kernel Improper Privilege Management Vulnerability—CVE-2013-2094—

98.7%

KEV—80Linux Kernel Privilege Escalation Vulnerability—