high
7.8
CWE
119 843 1025
Advisory Published
CVE Published
Updated

CVE-2022-34918: Buffer Overflow

First published: Sat Jul 02 2022(Updated: )

A heap buffer overflow flaw was found in the Linux kernel’s Netfilter subsystem in the way a user provides incorrect input of the NFT_DATA_VERDICT type. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Credit: cve@mitre.org cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
redhat/kernel<0:5.14.0-70.26.1.el9_0
0:5.14.0-70.26.1.el9_0
redhat/kernel-rt<0:5.14.0-70.26.1.rt21.98.el9_0
0:5.14.0-70.26.1.rt21.98.el9_0
redhat/Linux kernel<5.19
5.19
Linux Kernel>=4.1<4.14.316
Linux Kernel>=4.15<4.19.284
Linux Kernel>=4.20<5.4.244
Linux Kernel>=5.5<5.10.130
Linux Kernel>=5.11<5.15.54
Linux Kernel>=5.16<5.18.11
Debian Debian Linux=11.0
Ubuntu Linux=14.04
Ubuntu Linux=16.04
Ubuntu Linux=18.04
Ubuntu Linux=20.04
Ubuntu Linux=22.04
All of
netapp h300s firmware
netapp h300s
All of
NetApp H500S Firmware
netapp h500s
All of
netapp h700s firmware
netapp h700s
All of
netapp h410s firmware
netapp h410s
All of
netapp h410c firmware
netapp h410c
netapp h300s firmware
netapp h300s
NetApp H500S Firmware
netapp h500s
netapp h700s firmware
netapp h700s
netapp h410s firmware
netapp h410s
netapp h410c firmware
netapp h410c
debian/linux
5.10.223-1
5.10.226-1
6.1.123-1
6.1.119-1
6.12.11-1
6.12.12-1

Remedy

In order to trigger the issue, it requires the ability to create user/net namespaces. On non-containerized deployments of Red Hat Enterprise Linux, you can disable user namespaces by setting user.max_user_namespaces to 0: # echo "user.max_user_namespaces=0" > /etc/sysctl.d/userns.conf # sysctl -p /etc/sysctl.d/userns.conf On containerized deployments, such as Red Hat OpenShift Container Platform, do not use this mitigation as the functionality is needed to be enabled.

Remedy

https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e6bc1f6cabcd30aba0b11219d8e01b952eacbb6

Remedy

Unprivileged user namespaces can be disabled via: sudo sysctl kernel.unprivileged_userns_clone=0 This will affect browser sandboxing, container runtimes, etc. so may not be appropriate for all environments.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is the severity of CVE-2022-34918?

    CVE-2022-34918 is classified as a high severity vulnerability due to its potential for privilege escalation and system crashes.

  • How do I fix CVE-2022-34918?

    To fix CVE-2022-34918, update the Linux kernel to version 0:5.14.0-70.26.1.el9_0 or later versions listed in the remediation.

  • Which Linux distributions are affected by CVE-2022-34918?

    CVE-2022-34918 affects several Linux distributions including specific versions of Red Hat, Debian, and Ubuntu.

  • Can CVE-2022-34918 be exploited by remote users?

    No, CVE-2022-34918 requires local user access to exploit the vulnerability.

  • What systems are most at risk from CVE-2022-34918?

    Systems running vulnerable versions of the Linux kernel, particularly in environments where user inputs can be manipulated, are at higher risk.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203