Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-50213

netfilter: nf_tables: do not allow SET_ID to refer to another table

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow SET_ID to refer to another table When doing lookups for sets on the same batch by using its ID, a set from a different table can be used. Then, when the table is removed, a reference to the set may be kept after the set is freed, leading to a potential use-after-free. When looking for sets by ID, use the table that was used for the lookup by name, and only return sets belonging to that same table. This fixes CVE-2022-2586, also reported as ZDI-CAN-17470.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 958bee14d0718ca7a5002c0f48a099d1d345812a to < 77d3b5038b7462318f5183e2ad704b01d57215a2affected
  • 958bee14d0718ca7a5002c0f48a099d1d345812a to < fab2f61cc3b0e441b1749f017cfee75f9bbaded7affected
  • 958bee14d0718ca7a5002c0f48a099d1d345812a to < 1a4b18b1ff11ba26f9a852019d674fde9d1d1cffaffected
  • 958bee14d0718ca7a5002c0f48a099d1d345812a to < faafd9286f1355c76fe9ac3021c280297213330eaffected
  • 958bee14d0718ca7a5002c0f48a099d1d345812a to < f4fa03410f7c5f5bd8f90e9c11e9a8c4b526ff6faffected
  • 958bee14d0718ca7a5002c0f48a099d1d345812a to < 0d07039397527361850c554c192e749cfc879ea9affected
  • 958bee14d0718ca7a5002c0f48a099d1d345812a to < 470ee20e069a6d05ae549f7d0ef2bdbcee6a81b2affected

Linux Linux

Default version status: affected

  • 3.16affected
  • 0 to < 3.16unaffected
  • 4.19.256 to ≤ 4.19.*unaffected
  • 5.4.211 to ≤ 5.4.*unaffected
  • 5.10.137 to ≤ 5.10.*unaffected
  • 5.15.61 to ≤ 5.15.*unaffected
  • 5.18.18 to ≤ 5.18.*unaffected
  • 5.19.2 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References