PT-2025-8631 · Linux+5 · Linux Kernel+5
Publicado
2022-06-08
·
Atualizado
2026-04-29
·
CVE-2022-49698
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel has been resolved. The issue was related to the use of
prandom instead of get random u32 in the netfilter component. This could potentially lead to a bug when updating per-cpu rnd state from a user context. The problem was identified in the nft ng random eval function, which is part of the nft numgen module. To fix this, the random driver is used instead, which also eliminates the need for a local prandom state.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Ubuntu