PT-2022-7494 · Linux+4 · Linux Kernel+4
Syzbot
·
Published
2022-02-21
·
Updated
2025-09-29
·
CVE-2022-48935
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.16.0-rc5-syzkaller
Description
The issue is related to the netfilter component of the Linux kernel, specifically with the nf tables subsystem. It involves a use-after-free error in the
nf hook entries grow function, which can lead to a denial of service. The vulnerability arises when flowtable hooks are not unregistered before they are released via nf tables flowtable destroy, causing the hook core to report a use-after-free error.Technical details about exploitation include the
nf hook entries grow function and the nf tables flowtable destroy function. The nft register flowtable net hooks and nf tables newflowtable functions are also involved in the vulnerability.No information is provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linux Kernel
Red Os
Suse