CVE-2022-2588
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its...
- Published
- Jan 8, 2024
- Updated
- May 22, 2025
- Assigning CNA
- canonical
- Evidence observed
- Aug 8, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLow · next 30 days
- Percentile
- 92.9%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
Sources
10- CVE-2022-2588Exploit
Educational exploit for CVE-2022-2588, a Linux kernel race condition leading to privilege escalation. Includes Vagrant setup for a vulnerable machine and instructions to compile and run the exploit.
- CVE-2022-2588Exploit
Detailed write-up and exploit code for CVE-2022-2588, a Linux kernel use-after-free in route4_change leading to privilege escalation via double-free and credential swapping.
- CVE-2022-2588Exploit
Exploit code for CVE-2022-2588
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.