Linux Kernel privilege escalation vulnerability warning

Respectful master's command:

Hello! Recently, it was revealed that the Linux kernel has a local privilege escalation vulnerability. The vulnerability number is CVE-2022-2588, which can cause attackers to gain root privileges and other hazards.

[Vulnerability Rating]

High risk

[Vulnerability description]

CVE-2022-2588

The vulnerability is caused by the use-after-free flaw in route4_change implemented by the net/sched/cls_route.c filter in the Linux kernel. If exploited by a local authenticated attacker, it may cause system crash, privilege escalation, etc.

[scope of influence]

affected version

Linux kernel >= v2.6.12-rc2

[Repair Plan]

The vulnerability has been officially fixed in a higher version. Affected users are advised to upgrade to a safe version:

https://www.kernel.org/

[Reference link]

https://github.com/Markakd/CVE-2022-2588

 

https://access.redhat.com/security/cve/cve-2022-2588