CVE-2022-49183

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49183
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix ref leak when switching zones When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That's because tcf_ct_skb_nfct_cached() returns false and tcf_ct_flow_table_lookup() may simply overwrite it. The fix is to, as the ct entry is not reusable, free it already at tcf_ct_skb_nfct_cached().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4bb42d73def9411e5cad885b9811987d72431df1 Patch
https://git.kernel.org/stable/c/b24793a37d91aacad7cb9893b226a7924a89636a Patch
https://git.kernel.org/stable/c/bcb74e132a76ce0502bb33d5b65533a4ed72d159 Patch
https://git.kernel.org/stable/c/bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 18:56

Type Values Removed Values Added
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/sched: act_ct: se corrige la fuga de referencia al cambiar de zona Al cambiar de zona o de espacio de nombres de red sin hacer una limpieza de ct en el medio, ahora se filtra una referencia a la entrada ct anterior. Esto se debe a que tcf_ct_skb_nfct_cached() devuelve falso y tcf_ct_flow_table_lookup() puede simplemente sobrescribirlo. La solución es, como la entrada ct no es reutilizable, liberarla ya en tcf_ct_skb_nfct_cached().
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/4bb42d73def9411e5cad885b9811987d72431df1 - () https://git.kernel.org/stable/c/4bb42d73def9411e5cad885b9811987d72431df1 - Patch
References () https://git.kernel.org/stable/c/b24793a37d91aacad7cb9893b226a7924a89636a - () https://git.kernel.org/stable/c/b24793a37d91aacad7cb9893b226a7924a89636a - Patch
References () https://git.kernel.org/stable/c/bcb74e132a76ce0502bb33d5b65533a4ed72d159 - () https://git.kernel.org/stable/c/bcb74e132a76ce0502bb33d5b65533a4ed72d159 - Patch
References () https://git.kernel.org/stable/c/bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33d - () https://git.kernel.org/stable/c/bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33d - Patch

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-17 18:56

NVD link : CVE-2022-49183

Mitre link : CVE-2022-49183

CVE.ORG link : CVE-2022-49183

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other