PT-2025-8111 · Linux+3 · Linux Kernel+3

Florian Westphal · Publicado 2022-01-01 · Atualizado 2026-03-14 · CVE-2022-49183

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference leak occurs in the Linux kernel when switching zones or network namespaces without clearing the connection tracking (ct) entry in between. This happens because tcf ct skb nfct cached() returns false and tcf ct flow table lookup() may overwrite the old ct entry. The issue arises from the ct entry not being reusable.

Recommendations To resolve the issue, apply the fix that frees the ct entry at tcf ct skb nfct cached() to prevent reference leaks when switching zones or network namespaces.

Exploit

Correção

Identificadores relacionados

CVE-2022-49183

OESA-2025-1963

OESA-2025-1964

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Produtos afetados

Astra Linux

Debian

Linux Kernel

Suse

Referências · 1327

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49183.json · Exploit
• https://suse.com/security/cve/CVE-2022-49218 · Nota
• https://suse.com/security/cve/CVE-2022-49297 · Nota
• https://bugzilla.suse.com/1238106 · Nota
• https://suse.com/security/cve/CVE-2022-49385 · Nota
• https://bugzilla.suse.com/1237931 · Nota
• https://bugzilla.suse.com/1239073 · Nota
• https://suse.com/security/cve/CVE-2022-49566 · Nota
• https://bugzilla.suse.com/1238168 · Nota
• https://bugzilla.suse.com/1237727 · Nota
• https://bugzilla.suse.com/1238823 · Nota
• https://suse.com/security/cve/CVE-2022-49446 · Nota
• https://bugzilla.suse.com/1237823 · Nota
• https://suse.com/security/cve/CVE-2022-49712 · Nota
• https://bugzilla.suse.com/1238646 · Nota