CVE-2022-2588

MEDIUM

Published Jan 8, 2024 Modified Nov 21, 2024 CWE-416 CWE-415

Description

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Is your site exposed to CVE-2022-2588?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.3

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Weakness Type (CWE)

CWE-416 Use After Free

CWE-415 CWE-415

Affected Products

Vendor	Product	Versions
linux	linux_kernel	< 4.9.326
linux	linux_kernel	4.10 — 4.14.291
linux	linux_kernel	4.15 — 4.19.256
linux	linux_kernel	4.20 — 5.4.211
linux	linux_kernel	5.5 — 5.10.137
linux	linux_kernel	5.11 — 5.15.61
linux	linux_kernel	5.16 — 5.18.18
linux	linux_kernel	5.19 — 5.19.2
canonical	ubuntu_linux	All
canonical	ubuntu_linux	All
canonical	ubuntu_linux	All
canonical	ubuntu_linux	All
canonical	ubuntu_linux	All

References

Advisories & Patches

https://lore.kernel.org/netdev/[email protected]/T/#u https://lore.kernel.org/netdev/[email protected]/T/#u

Exploits

https://github.com/Markakd/CVE-2022-2588 https://github.com/Markakd/CVE-2022-2588

Other References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 https://ubuntu.com/security/notices/USN-5557-1 https://ubuntu.com/security/notices/USN-5560-1 https://ubuntu.com/security/notices/USN-5560-2 https://ubuntu.com/security/notices/USN-5562-1 https://ubuntu.com/security/notices/USN-5564-1 https://ubuntu.com/security/notices/USN-5565-1 https://ubuntu.com/security/notices/USN-5566-1 https://ubuntu.com/security/notices/USN-5567-1 https://ubuntu.com/security/notices/USN-5582-1

Frequently Asked Questions

What is CVE-2022-2588? +

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0. It has a CVSS v3.1 base score of 5.3 (MEDIUM).

How severe is CVE-2022-2588? +

CVE-2022-2588 has a CVSS v3.1 score of 5.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2022-2588? +

CVE-2022-2588 affects products from canonical, linux, specifically: linux_kernel, ubuntu_linux. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2022-2588? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-55406

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the …

CVE-2026-6040

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the …

CVE-2025-24898

rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice …

CVE-2025-31115

XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder …

CVE-2025-31498

c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue …

CVE-2025-4516

There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an …

Quick Facts

CVSS Score: 5.3
Severity: MEDIUM
Published: Jan 8, 2024

Scan for this vulnerability

Check if your website or infrastructure is affected by CVE-2022-2588.

Website Scan Port Scan

Browse CVEs

Critical High CISA KEV ! Most likely exploited →