PT-2024-11841 · Linux+1 · Linux Kernel+1

Published 2022-11-24 · Updated 2026-05-26 · CVE-2022-48976

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the netfilter: flowtable offload. The issue arises when flow offload queue work() is called in a workqueue without bh disabled, potentially causing a call trace error due to the use of this cpu add() in preemptible code. The error is fixed by using NF FLOW TABLE STAT INC ATOMIC() instead in flow offload queue work(). This change ensures that the function is safe to use in all cases, even though the FLOW CLS REPLACE branch may not be called in a preemptible path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALSA-2025_16880

AZL-51327

BDU:2025-14265

CVE-2022-48976

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Linux Kernel

Red Hat

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48976.json · Exploit
• https://git.kernel.org/stable/c/a81047154e7ce4eb8769d5d21adcbc9693542a79 · Patch
• https://git.kernel.org/stable/c/a220a11fda012fba506b35929672374c2723ae6d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48976 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48976 · Security Note
• https://ubuntu.com/security/CVE-2022-48976 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14265 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48976 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48976 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48976 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-51327 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-48976 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48976 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2024102145-CVE-2022-48976-2980@gregkh/T · Note