CVE Watch14 oct 2026

CVE-2022-2586

Linux Kernel Use-After-Free Vulnerability

CVSS

5.3

Medio

EPSS

10.2%

p96

KEV

SÍ

26 jun 2024

Exploit Today

0-100

Publicado: 8 ene 2024 · Última mod.: 14 oct 2026 · CWE-416

EPSS · 30d

10.2%EPSS · 30 días10.5%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

Linux / Kernel

Vulnerabilidad

Linux Kernel Use-After-Free Vulnerability

Añadido a KEV

26 jun 2024

Remediar antes de

17 jul 2024

Uso conocido en ransomware

Descripción resumida

Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

Acción requerida

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Notas

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131; https://nvd.nist.gov/vuln/detail/CVE-2022-2586

Descripción técnica

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-110922—

—

———Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)9h CVE-2026-110921—

—

———Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9h CVE-2026-110919—

—

———Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)9h CVE-2026-1084468.8 ALT

—

———Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.10h CVE-2026-1084428.8 ALT

—

———Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.10h