Remote No

Type Privilege escalation

Description

a user with the ability to create user/net namespaces can exploit a use-after-free write in netflter to achieve privilege escalation to root.

AVG-2751 linux 5.18.1-1 5.18.2-1 High Testing

https://seclists.org/oss-sec/2022/q2/159
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd
https://github.com/torvalds/linux/commit/520778042ccca019f3ffa136dd0ca565c486cedd
https://github.com/torvalds/linux/commit/0b2d8a7b638b5034d2d68f6add8af94daaa1d4cd