PT-2025-8491 · Linux+1 · Linux Kernel+1

Pablo Neira Ayuso · Published 2025-02-26 · Updated 2025-02-27 · CVE-2022-49558

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc7+

Description A double hook unregistration issue in the netfilter nf tables component has been identified. The nft release hooks() function is called from the pre netns exit path, which unregisters the hooks. However, the NETDEV UNREGISTER event is then triggered, causing the hooks to be unregistered again. This issue is associated with a warning message and a call trace that includes the nf unregister net hook+0x247/0x270 function.

Recommendations For Linux kernel versions prior to 5.18.0-rc7+, consider updating to a newer version that includes the fix for this issue. As a temporary workaround, it may be possible to mitigate the risk by modifying the netns pre exit path to avoid the double hook unregistration. However, without further information, the exact steps for this workaround are not clear. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-49558

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49558.json · Exploit
• https://git.kernel.org/stable/c/f9a43007d3f7ba76d5e7f9421094f00f2ef202f8 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49558 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49558 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49558 · Vendor Advisory
• https://git.kernel.org/stable/c/86c0154f4c3a56c5db8b9dd09e3ce885382c2c19 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49558 · Vendor Advisory
• https://git.kernel.org/stable/c/a3940dcf552f2393d1e8f263b386593f98abe829 · Patch
• https://git.kernel.org/stable/c/3fac8ce48fa9fd61ee9056d3ed48b2edefca8b82 · Patch
• https://git.kernel.org/stable/c/b09e6ccf0d12f9356e8e3508d3e3dce126298538 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49558 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49558 · Vendor Advisory
• https://git.kernel.org/stable/c/9c413a8c8bb49cc16796371805ecb260e885bb2b · Patch
• https://osv.dev/vulnerability/CVE-2022-49558 · Vendor Advisory
• https://git.kernel.org/linus/f9a43007d3f7ba76d5e7f9421094f00f2ef202f8 · Note