PT-2024-8457 · Linux+2 · Linux Kernel+2

Syzbot · Published 2022-09-20 · Updated 2025-09-18 · CVE-2022-48643

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an integer underflow in the nf tables addchain() function, which can lead to a denial of service. The problem occurs because nf tables chain destroy() after nft basechain init() in the error path of nf tables addchain() decrements the counter, and nft basechain init() makes nft is base chain() return true by setting the NFT CHAIN BASE flag. To fix this, the counter should be incremented immediately after returning from nft basechain init().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

BDU:2024-10017

CVE-2022-48643

OESA-2024-2080

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 79

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48643.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-48648 · Security Note
• https://ubuntu.com/security/CVE-2022-48643 · Vendor Advisory
• https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48643 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43831 · Security Note
• https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47292 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52901 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48935 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42265 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42285 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42308 · Security Note
• https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91 · Patch