CVE-2022-34918
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a...
- Published
- Jul 4, 2022
- Updated
- Oct 14, 2026
- Assigning CNA
- mitre
- Evidence observed
- Aug 8, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLow · next 30 days
- Percentile
- 92.6%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
Sources
modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux($.exploit_linux/local/netfilter_nft_set_elem_init_privesc.platform)
- verification: check_declared($.exploit_linux/local/netfilter_nft_set_elem_init_privesc.check)
- CVE-2022-34918Exploit
Local privilege escalation exploit for CVE-2022-34918 targeting Linux kernel 5.15.0-39-generic with a proof-of-concept binary and associated write-up.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.