Skip to content
feed: live
0dayNews
CVE Record
[ MEDIUM ]CVE-2022-2586

Linux Kernel Use-After-Free Vulnerability

Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

Vendor
Linux
Product
Kernel
CVSS
5.3
EPSS (exploit probability)
10.2%
Status
kev
CISA patch-by (BOD 22-01)
Added to KEV

Is CVE-2022-2586 being exploited?

Yes. CISA added CVE-2022-2586 to its Known Exploited Vulnerabilities catalog on . CISA only lists a CVE when it has reliable evidence of exploitation in the wild.

FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 10.2% (scored October 14, 2026).

Catalog snapshot 2026-10-19. Full cross-catalog view: /kev-comparison

What to do

CISA required actionApply updates per vendor instructions or discontinue use of the product if updates are unavailable.

US federal civilian agencies must remediate by (21 days after listing) under BOD 22-01. Everyone else: that deadline is a sensible upper bound, not a target. Vendor guidance and the NVD record are linked under Source above.

CVE / VulnerabilitySeverityCVSSEPSSAdded to KEV
CVE-2026-53266
Linux Kernel Out-of-Bounds Write Vulnerabilitywrite-up
[ HIGH ]8.80.8%
CVE-2025-39964
Linux Kernel Race Condition Vulnerabilitywrite-up
[ HIGH ]7.81.4%
CVE-2025-39682
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerabilitywrite-up
[ CRITICAL ]9.82.9%
CVE-2026-53362
Linux Kernel Unspecified Vulnerability
[ HIGH ]7.80.7%
CVE-2022-0995
Linux Kernel Out-of-Bounds Write Vulnerability
[ HIGH ]7.88.9%
CVE-2026-53264
Linux kernel traffic-control subsystem use-after-free racewrite-up
[ HIGH ]7.80.2%—
CVE-2022-0492
Linux Kernel Improper Authentication Vulnerability
[ HIGH ]7.85.5%
CVE-2026-31431
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
[ HIGH ]7.83.4%
All 32 Linux Kernel known exploited vulnerabilities →