CVE-2022-1966 - Vulnerability Details

Vendors	Products
Redhat	Enterprise Linux Rhel Eus Rhel Extras Rt

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 7
kernel-rt-0:3.10.0-1160.71.1.rt56.1212.el7	cpe:/a:redhat:rhel_extras_rt:7	RHSA-2022:5236	2022-06-28T00:00:00Z
kpatch-patch	cpe:/o:redhat:enterprise_linux:7	RHSA-2022:5216	2022-06-28T00:00:00Z
kernel-0:3.10.0-1160.71.1.el7	cpe:/o:redhat:enterprise_linux:7	RHSA-2022:5232	2022-06-28T00:00:00Z
Red Hat Enterprise Linux 8.2 Extended Update Support
kernel-rt-0:4.18.0-193.87.1.rt13.137.el8_2	cpe:/a:redhat:rhel_eus:8.2::nfv	RHSA-2022:5224	2022-06-28T00:00:00Z
kernel-0:4.18.0-193.87.1.el8_2	cpe:/o:redhat:rhel_eus:8.2	RHSA-2022:5220	2022-06-28T00:00:00Z
kpatch-patch	cpe:/o:redhat:rhel_eus:8.2	RHSA-2022:5476	2022-07-01T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-70.17.1.el9_0	cpe:/a:redhat:enterprise_linux:9	RHSA-2022:5249	2022-07-01T00:00:00Z
kernel-rt-0:5.14.0-70.17.1.rt21.89.el9_0	cpe:/a:redhat:enterprise_linux:9::nfv	RHSA-2022:5267	2022-06-28T00:00:00Z
kpatch-patch	cpe:/o:redhat:enterprise_linux:9	RHSA-2022:5214	2022-06-28T00:00:00Z
kernel-0:5.14.0-70.17.1.el9_0	cpe:/o:redhat:enterprise_linux:9	RHSA-2022:5249	2022-07-01T00:00:00Z
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7
redhat-virtualization-host-0:4.3.23-20220622.0.el7_9	cpe:/o:redhat:enterprise_linux:7::hypervisor	RHSA-2022:5439	2022-07-01T00:00:00Z

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2022-1966
https://www.cve.org/CVERecord?id=CVE-2022-1966

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"state": "REJECTED", "cveId": "CVE-2022-1966", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "dateUpdated": "2025-02-13T15:46:17.699Z", "dateRejected": "2023-02-12T00:00:00", "dateReserved": "2022-06-01T00:00:00.000Z", "datePublished": "2022-06-06T18:01:49.639Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2023-02-12T00:00:00.000Z"}, "rejectedReasons": [{"lang": "en", "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."}]}}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.0 (string)

cveMetadata : { »

state : REJECTED (string)

cveId : CVE-2022-1966 (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

assignerShortName : redhat (string)

dateUpdated : 2025-02-13T15:46:17.699Z (string)

dateRejected : 2023-02-12T00:00:00 (string)

dateReserved : 2022-06-01T00:00:00.000Z (string)

datePublished : 2022-06-06T18:01:49.639Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2023-02-12T00:00:00.000Z (string)

}

rejectedReasons : [ »

0 : { »

lang : en (string)

value : DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. (string)

}

]

}

Show plain JSON

{"affected_release": [{"advisory": "RHSA-2022:5236", "cpe": "cpe:/a:redhat:rhel_extras_rt:7", "package": "kernel-rt-0:3.10.0-1160.71.1.rt56.1212.el7", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2022-06-28T00:00:00Z"}, {"advisory": "RHSA-2022:5216", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "kpatch-patch", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2022-06-28T00:00:00Z"}, {"advisory": "RHSA-2022:5232", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "kernel-0:3.10.0-1160.71.1.el7", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2022-06-28T00:00:00Z"}, {"advisory": "RHSA-2022:5224", "cpe": "cpe:/a:redhat:rhel_eus:8.2::nfv", "package": "kernel-rt-0:4.18.0-193.87.1.rt13.137.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Extended Update Support", "release_date": "2022-06-28T00:00:00Z"}, {"advisory": "RHSA-2022:5220", "cpe": "cpe:/o:redhat:rhel_eus:8.2", "package": "kernel-0:4.18.0-193.87.1.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Extended Update Support", "release_date": "2022-06-28T00:00:00Z"}, {"advisory": "RHSA-2022:5476", "cpe": "cpe:/o:redhat:rhel_eus:8.2", "package": "kpatch-patch", "product_name": "Red Hat Enterprise Linux 8.2 Extended Update Support", "release_date": "2022-07-01T00:00:00Z"}, {"advisory": "RHSA-2022:5249", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-70.17.1.el9_0", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2022-07-01T00:00:00Z"}, {"advisory": "RHSA-2022:5267", "cpe": "cpe:/a:redhat:enterprise_linux:9::nfv", "package": "kernel-rt-0:5.14.0-70.17.1.rt21.89.el9_0", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2022-06-28T00:00:00Z"}, {"advisory": "RHSA-2022:5214", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "kpatch-patch", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2022-06-28T00:00:00Z"}, {"advisory": "RHSA-2022:5249", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-70.17.1.el9_0", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2022-07-01T00:00:00Z"}, {"advisory": "RHSA-2022:5439", "cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor", "package": "redhat-virtualization-host-0:4.3.23-20220622.0.el7_9", "product_name": "Red Hat Virtualization 4 for Red Hat Enterprise Linux 7", "release_date": "2022-07-01T00:00:00Z"}], "bugzilla": {"description": "kernel: netfilter: nf_tables: incorrect NFT_STATEFUL_EXPR check leads to a use-after-free (write)", "id": "2093146", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2093146"}, "csaw": false, "cwe": "CWE-416", "details": ["[REJECTED CVE] A use-after-free vulnerability has been identified in the Linux Kernel's  netfilter subsystem that did not properly handle the removal of stateful expressions in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code."], "name": "CVE-2022-1966", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Under investigation", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}], "public_date": "2022-06-02T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-1966\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-1966"], "statement": "This CVE has been rejected. This candidate is a duplicate of CVE-2022-32250. Note: All CVE users should reference CVE-2022-32250 instead of this candidate."}

{

affected_release : [ »

0 : { »

advisory : RHSA-2022:5236 (string)

cpe : cpe:/a:redhat:rhel_extras_rt:7 (string)

package : kernel-rt-0:3.10.0-1160.71.1.rt56.1212.el7 (string)

product_name : Red Hat Enterprise Linux 7 (string)

release_date : 2022-06-28T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2022:5216 (string)

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

package : kpatch-patch (string)

product_name : Red Hat Enterprise Linux 7 (string)

release_date : 2022-06-28T00:00:00Z (string)

}

2 : { »

advisory : RHSA-2022:5232 (string)

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

package : kernel-0:3.10.0-1160.71.1.el7 (string)

product_name : Red Hat Enterprise Linux 7 (string)

release_date : 2022-06-28T00:00:00Z (string)

}

3 : { »

advisory : RHSA-2022:5224 (string)

cpe : cpe:/a:redhat:rhel_eus:8.2::nfv (string)

package : kernel-rt-0:4.18.0-193.87.1.rt13.137.el8_2 (string)

product_name : Red Hat Enterprise Linux 8.2 Extended Update Support (string)

release_date : 2022-06-28T00:00:00Z (string)

}

4 : { »

advisory : RHSA-2022:5220 (string)

cpe : cpe:/o:redhat:rhel_eus:8.2 (string)

package : kernel-0:4.18.0-193.87.1.el8_2 (string)

product_name : Red Hat Enterprise Linux 8.2 Extended Update Support (string)

release_date : 2022-06-28T00:00:00Z (string)

}

5 : { »

advisory : RHSA-2022:5476 (string)

cpe : cpe:/o:redhat:rhel_eus:8.2 (string)

package : kpatch-patch (string)

product_name : Red Hat Enterprise Linux 8.2 Extended Update Support (string)

release_date : 2022-07-01T00:00:00Z (string)

}

6 : { »

advisory : RHSA-2022:5249 (string)

cpe : cpe:/a:redhat:enterprise_linux:9 (string)

package : kernel-0:5.14.0-70.17.1.el9_0 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2022-07-01T00:00:00Z (string)

}

7 : { »

advisory : RHSA-2022:5267 (string)

cpe : cpe:/a:redhat:enterprise_linux:9::nfv (string)

package : kernel-rt-0:5.14.0-70.17.1.rt21.89.el9_0 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2022-06-28T00:00:00Z (string)

}

8 : { »

advisory : RHSA-2022:5214 (string)

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

package : kpatch-patch (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2022-06-28T00:00:00Z (string)

}

9 : { »

advisory : RHSA-2022:5249 (string)

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

package : kernel-0:5.14.0-70.17.1.el9_0 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2022-07-01T00:00:00Z (string)

}

10 : { »

advisory : RHSA-2022:5439 (string)

cpe : cpe:/o:redhat:enterprise_linux:7::hypervisor (string)

package : redhat-virtualization-host-0:4.3.23-20220622.0.el7_9 (string)

product_name : Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 (string)

release_date : 2022-07-01T00:00:00Z (string)

}

]

bugzilla : { »

description : kernel: netfilter: nf_tables: incorrect NFT_STATEFUL_EXPR check leads to a use-after-free (write) (string)

id : 2093146 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2093146 (string)

}

csaw : false (boolean)

cwe : CWE-416 (string)

details : [ »

0 : [REJECTED CVE] A use-after-free vulnerability has been identified in the Linux Kernel's netfilter subsystem that did not properly handle the removal of stateful expressions in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (string)

]

name : CVE-2022-1966 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Under investigation (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Under investigation (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Under investigation (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

]

public_date : 2022-06-02T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2022-1966 https://nvd.nist.gov/vuln/detail/CVE-2022-1966 (string)

]

statement : This CVE has been rejected. This candidate is a duplicate of CVE-2022-32250. Note: All CVE users should reference CVE-2022-32250 instead of this candidate. (string)

}

Metrics

Affected Vendors & Products

Metrics

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object