CVE-2022-1015
Quick assessment
Affected
n/a kernel
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux 内核存在安全漏洞，该漏洞源于在netfilter子系统的linux/net/netfilter/nf_tables_api.c中存在Linux内核的一个缺陷。 此漏洞允许本地用户导致越界写入问题。 攻击者可以通过nft_expr_payload触发 Linux 内核的内存损坏，从而触发拒绝服务，并可能运行代码。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-1015
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux 内核存在安全漏洞，该漏洞源于在netfilter子系统的linux/net/netfilter/nf_tables_api.c中存在Linux内核的一个缺陷。 此漏洞允许本地用户导致越界写入问题。 攻击者可以通过nft_expr_payload触发 Linux 内核的内存损坏，从而触发拒绝服务，并可能运行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | kernel | Kernel 5.16.18 | - |
|
II. Public POCs for CVE-2022-1015
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Local privilege escalation PoC for Linux kernel CVE-2022-1015 | https://github.com/pqlx/CVE-2022-1015 | POC Details |
| 2 | Traducción al español de los CVE-2022-1015 y 1016 descubiertos y documentados por David. | https://github.com/zanezhub/CVE-2022-1015-1016 | POC Details |
| 3 | CVE-2022-1015 | https://github.com/shuttterman/bob_kern_exp1 | POC Details |
| 4 | A write-up and LPE PoC of an OOB read and write vulnerability in the Linux Kernel. | https://github.com/ysanatomic/CVE-2022-1015 | POC Details |
| 5 | None | https://github.com/wlswotmd/CVE-2022-1015 | POC Details |
| 6 | None | https://github.com/delsploit/CVE-2022-1015 | POC Details |
| 7 | None | https://github.com/pivik271/CVE-2022-1015 | POC Details |
| 8 | Linux Kernel 1-Day Analysis & Exploitation | https://github.com/more-kohii/CVE-2022-1015 | POC Details |
| 9 | None | https://github.com/0range1337/CVE-2022-1015 | POC Details |
| 10 | None | https://github.com/hoanghailongvn/CVE-2022-1015 | POC Details |
| 11 | None | https://github.com/seadragnol/CVE-2022-1015 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-1015
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-1015 (1)
Exploits & Public PoCs for CVE-2022-1015 (1)
Mailing List Discussions for CVE-2022-1015 (4)
Security Blog Posts for CVE-2022-1015 (1)
Same Patch Batch · n/a · 2022-04-29 · 32 CVEs total
| CVE-2022-25854 | 5.4 MEDIUM | Cross-site Scripting (XSS) |
| CVE-2022-29945 | 4.0 MEDIUM | DJI drone 安全漏洞 |
| CVE-2022-29903 | MediaWiki 跨站请求伪造漏洞 | |
| CVE-2022-1114 | Imagemagick Studio ImageMagick 资源管理错误漏洞 | |
| CVE-2022-1048 | Linux kernel 资源管理错误漏洞 | |
| CVE-2022-29856 | Automation 360 信任管理问题漏洞 | |
| CVE-2022-28452 | Red Planet Laundry Management System SQL注入漏洞 | |
| CVE-2021-41948 | Subrion CMS 跨站脚本漏洞 | |
| CVE-2021-44596 | Wondershare 安全漏洞 | |
| CVE-2021-44595 | Wondershare 安全漏洞 | |
| CVE-2021-41942 | Magic CMS SQL注入漏洞 | |
| CVE-2022-1249 | RedHat pesign 代码问题漏洞 | |
| CVE-2022-29904 | MediaWiki SQL注入漏洞 | |
| CVE-2022-29905 | MediaWiki 跨站请求伪造漏洞 | |
| CVE-2022-29906 | MediaWiki 安全漏洞 | |
| CVE-2022-29907 | MediaWiki 跨站脚本漏洞 | |
| CVE-2021-3982 | gnome-shell 安全漏洞 | |
| CVE-2022-1195 | Linux kernel 资源管理错误漏洞 | |
| CVE-2022-29967 | Glewlwyd 路径遍历漏洞 | |
| CVE-2022-1227 | Podman 权限许可和访问控制问题漏洞 |
Showing top 20 of 32 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: kernel
-
CVE-2025-26604
Possibility to retrieve bot token by malicious module develo -
CVE-2021-35000
OpenBSD Kernel Multicast Routing Uninitialized Memory Inform -
CVE-2021-34999
OpenBSD Kernel Multicast Routing Uninitialized Memory Inform -
CVE-2021-34981
Linux Kernel Bluetooth CMTP Module Double Free Privilege Esc -
CVE-2024-24898
Information Leakage in kernel
Same vendor: n/a
-
CVE-2026-93962
Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-ba -
CVE-2026-93960
Pixelfed OAuth Scope ApiV1Controller.php instancePeers missi -
CVE-2026-93650
Saleor throttling.py get_client_ip excessive authentication -
CVE-2026-93506
SveltyCMS File Upload Endpoint upload-media server-side requ -
CVE-2026-93505
SveltyCMS SVG Media Upload media-service.server.ts cross sit
Same weakness: CWE-787
-
CVE-2026-94054
Exim 4.100.1前Proxy-Protocol致越界写入 -
CVE-2026-93894
Vinyl Cache 9.0、2 工作区缓冲区溢出致远程拒绝服务 -
CVE-2026-75892
Out of bounds write in PDP ctx GSN-Address decode -
CVE-2026-91142
Cockpit: integer overflow in `do_lastlog()` offset calculati -
CVE-2026-84444
libheif uncompressed tiled image encoding allows out-of-boun
V. Comments for CVE-2022-1015
No comments yet