Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-48911

netfilter: nf_queue: fix possible use-after-free

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() side seems suspect, because there is no guarantee that sk_refcnt is not already 0. On failure, we cannot queue the packet and need to indicate an error. The packet will be dropped by the caller. v2: split skb prefetch hunk into separate change

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 271b72c7fa82c2c7a795bc16896149933110672d to < 21b27b2baa27423286e9b8d3f0b194d587083d95affected
  • 271b72c7fa82c2c7a795bc16896149933110672d to < ef97921ccdc243170fcef857ba2a17cf697aece5affected
  • 271b72c7fa82c2c7a795bc16896149933110672d to < 34dc4a6a7f261736ef7183868a5bddad31c7f9e3affected
  • 271b72c7fa82c2c7a795bc16896149933110672d to < 43c25da41e3091b31a906651a43e80a2719aa1ffaffected
  • 271b72c7fa82c2c7a795bc16896149933110672d to < 4d05239203fa38ea8a6f31e228460da4cb17a71aaffected
  • 271b72c7fa82c2c7a795bc16896149933110672d to < dd648bd1b33a828f62befa696b206c688da0ec43affected
  • 271b72c7fa82c2c7a795bc16896149933110672d to < dcc3cb920bf7ba66ac5e9272293a9ba5f80917eeaffected
  • 271b72c7fa82c2c7a795bc16896149933110672d to < c3873070247d9e3c7a6b0cf9bf9b45e8018427b1affected

Linux Linux

Default version status: affected

  • 2.6.29affected
  • 0 to < 2.6.29unaffected
  • 4.9.305 to ≤ 4.9.*unaffected
  • 4.14.270 to ≤ 4.14.*unaffected
  • 4.19.233 to ≤ 4.19.*unaffected
  • 5.4.183 to ≤ 5.4.*unaffected
  • 5.10.104 to ≤ 5.10.*unaffected
  • 5.15.27 to ≤ 5.15.*unaffected
  • 5.16.13 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References