CVE-2022-1016: Use After Free
A flaw was found in the Linux kernel in net/netfilter/nftablescore.c:nftdochain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.
Other sources
Uninitialized registers on stack in nftdochain can cause kernel pointer leakage to uninitialized memory.
— Red Hat
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-1016?
CVE-2022-1016 is considered to have high severity due to its potential to allow local unprivileged attackers to exploit a use-after-free condition.
How do I fix CVE-2022-1016?
To fix CVE-2022-1016, update to the recommended versions of the kernel as specified by your distribution.
What systems are affected by CVE-2022-1016?
CVE-2022-1016 affects various versions of the Linux kernel across distributions like Red Hat and Debian.
What type of vulnerability is CVE-2022-1016?
CVE-2022-1016 is a use-after-free vulnerability in the Linux kernel's netfilter subsystem.
Can CVE-2022-1016 lead to data exposure?
Yes, CVE-2022-1016 can lead to kernel information leaks, which may expose sensitive data.