Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-e1ec-jsa3-nkeq
Vulnerability ID VCID-e1ec-jsa3-nkeq
Aliases CVE-2022-1972
Summary kernel: out-of-bounds write vulnerability in nftable may lead to local privilege escalation
Status Invalid
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-787 Out-of-bounds Write
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1972.json
cvssv3.1 7 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
archlinux High https://security.archlinux.org/AVG-2751
archlinux High https://security.archlinux.org/AVG-2752
archlinux High https://security.archlinux.org/AVG-2753
archlinux High https://security.archlinux.org/AVG-2754
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1972.json
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2092537 https://bugzilla.redhat.com/show_bug.cgi?id=2092537
AVG-2751 https://security.archlinux.org/AVG-2751
AVG-2752 https://security.archlinux.org/AVG-2752
AVG-2753 https://security.archlinux.org/AVG-2753
AVG-2754 https://security.archlinux.org/AVG-2754
USN-5468-1 https://usn.ubuntu.com/5468-1/
USN-5469-1 https://usn.ubuntu.com/5469-1/
USN-5470-1 https://usn.ubuntu.com/5470-1/
USN-5471-1 https://usn.ubuntu.com/5471-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1972.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-04-03T16:28:15.840823+00:00 NVD CVE Status Improver Improve https://cveawg.mitre.org/api/cve/CVE-2022-1972 38.1.0
2026-04-01T13:58:14.383864+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1972.json 38.0.0