Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49919

netfilter: nf_tables: release flow rule object from commit path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flow rule object from commit path No need to postpone this to the commit release path, since no packets are walking over this object, this is accessed from control plane only. This helped uncovered UAF triggered by races with the netlink notifier.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5b8d63489c3b701eb2a76f848ec94d8cbc9373b9 to < 74fd5839467054cd9c4d050614d3ee8788386171affected
  • 330c0c6cd2150a2d7f47af16aa590078b0d2f736 to < b2d7a92aff0fbd93c29d2aa6451fb99f050e2c4eaffected
  • e33d9bd563e71f6c6528b96008d65524a459c4dc to < 6044791b7be707fd0e709f26e961a446424e5051affected
  • 9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3 to < 4ab6f96444e936f5e4a936d5c0bc948144bcded3affected
  • 9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3 to < 26b5934ff4194e13196bedcba373cd4915071d0eaffected
  • 80de9ea1f5b808a6601e91111fae601df2b26369affected
  • ab9f34a30c23f656e76f4c5b83125a4e7b53c86eaffected
  • 5.4.198 to < 5.4.224affected
  • 5.10.122 to < 5.10.154affected
  • 5.15.47 to < 5.15.78affected
  • 5.17.15 to < 5.18affected
  • 5.18.4 to < 5.19affected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 5.4.224 to ≤ 5.4.*unaffected
  • 5.10.154 to ≤ 5.10.*unaffected
  • 5.15.78 to ≤ 5.15.*unaffected
  • 6.0.8 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References