PT-2022-6195 · Linux+8 · Linux Kernel+8

David Leadbeater · Published 2022-08-30 · Updated 2025-10-07 · CVE-2022-2663

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue in the Linux kernel's nf conntrack irc module can cause message handling confusion, leading to incorrect message matching. This can potentially allow a firewall to be bypassed when users are using unencrypted IRC with nf conntrack irc configured. The vulnerability is related to improper message processing and matching, which may enable an attacker to circumvent firewall restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-923

Related Identifiers

ALSA-2023:2148

ALSA-2023:2458

ALSA-2023:2736

ALSA-2023:2951

ALSA-2023_2148

ALSA-2023_2458

ALSA-2023_2736

ALSA-2023_2951

ALT-PU-2022-3066

BDU:2023-00454

CESA-2023_2736

CESA-2023_2951

CVE-2022-2663

DLA-3131-1

DLA-3173-1

DSA-5257-1

DSA-5257-2

ELSA-2022-10065

ELSA-2022-10108

ELSA-2023-2458

ELSA-2023-2951

MGASA-2022-0379

MGASA-2022-0380

OESA-2022-1925

OESA-2022-1926

OESA-2022-1927

OESA-2022-1985

OESA-2022-1991

OPENSUSE-SU-2022_3264-1

OPENSUSE-SU-2022_3288-1

OPENSUSE-SU-2022_3293-1

OPENSUSE-SU-2022_3408-1

OPENSUSE-SU-2022_3609-1

OPENSUSE-SU-2022_4617-1

RHSA-2023:2148

RHSA-2023:2458

RHSA-2023:2736

RHSA-2023:2951

RHSA-2023_2148

RHSA-2023_2458

RHSA-2023_2736

RHSA-2023_2951

RHSA-2024:0724

SUSE-SU-2022:3264-1

SUSE-SU-2022:3288-1

SUSE-SU-2022:3291-1

SUSE-SU-2022:3293-1

SUSE-SU-2022:3408-1

SUSE-SU-2022:3422-1

SUSE-SU-2022:3450-1

SUSE-SU-2022:3584-1

SUSE-SU-2022:3586-1

SUSE-SU-2022:3587-1

SUSE-SU-2022:3609-1

SUSE-SU-2022:3809-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4611-1

SUSE-SU-2022:4617-1

SUSE-SU-2022_3264-1

SUSE-SU-2022_3288-1

SUSE-SU-2022_3291-1

SUSE-SU-2022_3408-1

SUSE-SU-2022_3584-1

SUSE-SU-2022_3586-1

SUSE-SU-2022_3587-1

SUSE-SU-2022_3609-1

SUSE-SU-2022_3809-1

SUSE-SU-2022_4561-1

SUSE-SU-2022_4611-1

SUSE-SU-2023:0416-1

SUSE-SU-2023_0416-1

USN-5791-1

USN-5791-2

USN-5791-3

USN-5792-1

USN-5792-2

USN-5793-1

USN-5793-2

USN-5793-3

USN-5793-4

USN-5815-1

USN-5854-1

USN-5861-1

USN-5862-1

USN-5865-1

USN-5877-1

USN-5883-1

USN-5924-1

USN-5975-1

USN-6001-1

USN-6007-1

USN-6013-1

USN-6014-1

USN-6247-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 940

• 🔥 https://dgl.cx/2022/08/nat-again-irc-cve-2022-2663 · Exploit
• 🔥 https://youtube.com/watch?v=WIq-YgQuYCA · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2022:3288-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-10065.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5791-3 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2458.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1205 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27784 · Security Note
• https://ubuntu.com/security/CVE-2022-39842 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-2663 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0394 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2458.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5791-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5854-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5877-1 · Vendor Advisory