Privilege Escalation Vulnerability in Netfilter Kernel Module

• •CVE-2022-25636 allows privilege escalation in netfilter kernel module.
• •Exploitation requires SYS_ADMIN privileges and has a success rate below 50%.
• •Users should update their kernel to mitigate the vulnerability.

CVE-2022-25636 is a privilege escalation vulnerability in the netfilter kernel module, identified on February 22, 2022. It allows users with SYS_ADMIN privileges to exploit a heap overflow due to a lack of boundary checks in the nft_fwd_dup_netdev_offload function. This vulnerability affects systems running the netfilter module in Linux kernel versions that include the flawed code. The exploit can lead to unauthorized privilege escalation, but success rates are reported to be less than 50%. Users are advised to update their kernel to mitigate this risk. The vulnerability was first publicly demonstrated through a proof-of-concept on March 7, 2022. Current status indicates ongoing concerns regarding its exploitation potential, particularly in environments where the netfilter module is utilized.