SETTLERS OF NETLINK: Exploiting a limited UAF in nf_tables (CVE-2022-32250)
Tags
country: Singapore
attack-pattern: Data Hardware - T1592.001 Ip Addresses - T1590.005 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID d8269644-1f8d-402d-b79b-bf26a7ffb022
Fingerprint ee3899d9a6a71289
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 1, 2022, 8:56 a.m.
Added to db Sept. 11, 2022, 12:31 p.m.
Last updated Nov. 12, 2024, 11:46 a.m.
Headline SETTLERS OF NETLINK: Exploiting a limited UAF in nf_tables (CVE-2022-32250)
Title SETTLERS OF NETLINK: Exploiting a limited UAF in nf_tables (CVE-2022-32250)
Detected Hints/Tags/Attributes 85/2/35
Source URLs
Redirection Url
Details Source https://research.nccgroup.com/2022/09/01/settlers-of-netlink-exploiting-a-limited-uaf-in-nf_tables-cve-2022-32250/
URL Provider
Details Provider Source level domain
Details nccgroup.com research.nccgroup.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 206 ✔ — https://research.nccgroup.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 3 
cve-2022-32250
Details CVE 12 
cve-2022-0185
Details CVE 3 
cve-2022-0995
Details CVE 1 
cve-2022-1966
Details Domain 10 
elixir.bootlin.com
Details Domain 23 
kernel.org
Details Domain 2 
vs.openwall.org
Details Email 4 
security@kernel.org
Details Email 2 
linux-distros@vs.openwall.org
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/include/net/netfilter/nf_tables.h#l440
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l4189
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l4354
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l4401
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l4448
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l5304
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l2814
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l64
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l18
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/include/net/netfilter/nf_tables.h#l545
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l74
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l115
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l4589
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l4601
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l237
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_limit.c#l230
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l2752
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l232
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l142
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l231
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_lookup.c#l125
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l4647
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nf_tables_api.c#l4634
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/net/netfilter/nft_dynset.c#l15
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/kernel/cgroup/cgroup-internal.h#l46
Details Url 1 
https://elixir.bootlin.com/linux/v5.13/source/kernel/cgroup/cgroup.c#l2123