CVE-2022-25636

HIGH 7.8CVE-2022-25636 · Published 24/02/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
communications cloud native core binding support function oracle	`= 22.1.3`	No fix yet
communications cloud native core network exposure function oracle	`= 22.1.1`	No fix yet
communications cloud native core policy oracle	`= 22.2.0`	No fix yet

Description

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.

References

packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html · Third Party Advisory
openwall.com/lists/oss-security/2022/02/22/1 · Mailing List
git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git/commit · Patch
Bonfee/CVE-2022-25636 · Exploit
nickgregory.me/linux/security/2022/03/12/cve-2022-25636 · Exploit
security.netapp.com/advisory/ntap-20220325-0002 · Third Party Advisory
debian.org/security/2022/dsa-5095 · Third Party Advisory
openwall.com/lists/oss-security/2022/02/21/2 · Exploit
oracle.com/security-alerts/cpujul2022.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free