PT-2024-11839 · Linux+1 · Linux Kernel+1

Published 2022-11-24 · Updated 2025-09-29 · CVE-2022-48974

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel related to the netfilter conntrack module. The issue occurs when nf conntrack hash check insert() fails in nf ct ext valid pre/post(), causing NF CT STAT INC() to be called in a preemptible context, which can trigger a call trace. The patch fixes this by using NF CT STAT INC ATOMIC() for the nf ct ext valid pre/post() check in nf conntrack hash check insert() and nf ct ext valid post() in nf conntrack confirm(). The nf ct ext valid pre() check in nf conntrack confirm() is safe to use NF CT STAT INC() as it is under local bh disable().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

ALSA-2025_16880

BDU:2025-14264

CVE-2022-48974

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Linux Kernel

Red Hat

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48974.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-48974 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48974 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48974 · Vendor Advisory
• https://git.kernel.org/stable/c/d9bf1138a5db419db13bd9fcd3a7178d6bb20f7c · Patch
• https://git.kernel.org/stable/c/9464d0b68f11a9bc768370c3260ec02b3550447b · Patch
• https://bdu.fstec.ru/vul/2025-14264 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48974 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48974 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-48974 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48974 · Vendor Advisory
• https://git.kernel.org/linus/9464d0b68f11a9bc768370c3260ec02b3550447b · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.13 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2024102145-CVE-2022-48974-d2d0@gregkh/T · Note