CVE-2022-48642

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48642
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() It seems to me that percpu memory for chain stats started leaking since commit 3bc158f8d0330f0a ("netfilter: nf_tables: map basechain priority to hardware priority") when nft_chain_offload_priority() returned an error.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/08d7524f366a886b99b1630a24a27dd6e0d7f852 Patch
https://git.kernel.org/stable/c/985b031667c3177b9e7fb9787b989628e4271714 Patch
https://git.kernel.org/stable/c/9a4d6dd554b86e65581ef6b6638a39ae079b17ac Patch
https://git.kernel.org/stable/c/b043a525a3f5520abb676a7cd8f6328fdf959e88 Patch
https://git.kernel.org/stable/c/08d7524f366a886b99b1630a24a27dd6e0d7f852 Patch
https://git.kernel.org/stable/c/985b031667c3177b9e7fb9787b989628e4271714 Patch
https://git.kernel.org/stable/c/9a4d6dd554b86e65581ef6b6638a39ae079b17ac Patch
https://git.kernel.org/stable/c/b043a525a3f5520abb676a7cd8f6328fdf959e88 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*
History

07 Jan 2025, 16:58

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE CWE-401
References () https://git.kernel.org/stable/c/08d7524f366a886b99b1630a24a27dd6e0d7f852 - () https://git.kernel.org/stable/c/08d7524f366a886b99b1630a24a27dd6e0d7f852 - Patch
References () https://git.kernel.org/stable/c/985b031667c3177b9e7fb9787b989628e4271714 - () https://git.kernel.org/stable/c/985b031667c3177b9e7fb9787b989628e4271714 - Patch
References () https://git.kernel.org/stable/c/9a4d6dd554b86e65581ef6b6638a39ae079b17ac - () https://git.kernel.org/stable/c/9a4d6dd554b86e65581ef6b6638a39ae079b17ac - Patch
References () https://git.kernel.org/stable/c/b043a525a3f5520abb676a7cd8f6328fdf959e88 - () https://git.kernel.org/stable/c/b043a525a3f5520abb676a7cd8f6328fdf959e88 - Patch

21 Nov 2024, 07:33

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: netfilter: nf_tables: corrige la pérdida de memoria de percpu en nf_tables_addchain() Me parece que la memoria de percpu para las estadísticas de la cadena comenzó a perderse desde el commit 3bc158f8d0330f0a ("netfilter: nf_tables: asigna la prioridad de la cadena base al hardware prioridad") cuando nft_chain_offload_priority() devolvió un error.
References () https://git.kernel.org/stable/c/08d7524f366a886b99b1630a24a27dd6e0d7f852 - () https://git.kernel.org/stable/c/08d7524f366a886b99b1630a24a27dd6e0d7f852 -
References () https://git.kernel.org/stable/c/985b031667c3177b9e7fb9787b989628e4271714 - () https://git.kernel.org/stable/c/985b031667c3177b9e7fb9787b989628e4271714 -
References () https://git.kernel.org/stable/c/9a4d6dd554b86e65581ef6b6638a39ae079b17ac - () https://git.kernel.org/stable/c/9a4d6dd554b86e65581ef6b6638a39ae079b17ac -
References () https://git.kernel.org/stable/c/b043a525a3f5520abb676a7cd8f6328fdf959e88 - () https://git.kernel.org/stable/c/b043a525a3f5520abb676a7cd8f6328fdf959e88 -

28 Apr 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-28 13:15

Updated : 2025-01-07 16:58

NVD link : CVE-2022-48642

Mitre link : CVE-2022-48642

CVE.ORG link : CVE-2022-48642

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime