CVE-2022-49358

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49358
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: memleak flow rule from commit path Abort path release flow rule object, however, commit path does not. Update code to destroy these objects before releasing the transaction.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/330c0c6cd2150a2d7f47af16aa590078b0d2f736 Patch
https://git.kernel.org/stable/c/5b8d63489c3b701eb2a76f848ec94d8cbc9373b9 Patch
https://git.kernel.org/stable/c/80de9ea1f5b808a6601e91111fae601df2b26369 Patch
https://git.kernel.org/stable/c/9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3 Patch
https://git.kernel.org/stable/c/ab9f34a30c23f656e76f4c5b83125a4e7b53c86e Patch
https://git.kernel.org/stable/c/e33d9bd563e71f6c6528b96008d65524a459c4dc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
History

14 Apr 2025, 19:44

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nf_tables: regla de flujo de memleak de la ruta de confirmación. La ruta de cancelación libera el objeto de regla de flujo, pero la ruta de confirmación no lo hace. Actualice el código para destruir estos objetos antes de liberar la transacción.
References () https://git.kernel.org/stable/c/330c0c6cd2150a2d7f47af16aa590078b0d2f736 - () https://git.kernel.org/stable/c/330c0c6cd2150a2d7f47af16aa590078b0d2f736 - Patch
References () https://git.kernel.org/stable/c/5b8d63489c3b701eb2a76f848ec94d8cbc9373b9 - () https://git.kernel.org/stable/c/5b8d63489c3b701eb2a76f848ec94d8cbc9373b9 - Patch
References () https://git.kernel.org/stable/c/80de9ea1f5b808a6601e91111fae601df2b26369 - () https://git.kernel.org/stable/c/80de9ea1f5b808a6601e91111fae601df2b26369 - Patch
References () https://git.kernel.org/stable/c/9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3 - () https://git.kernel.org/stable/c/9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3 - Patch
References () https://git.kernel.org/stable/c/ab9f34a30c23f656e76f4c5b83125a4e7b53c86e - () https://git.kernel.org/stable/c/ab9f34a30c23f656e76f4c5b83125a4e7b53c86e - Patch
References () https://git.kernel.org/stable/c/e33d9bd563e71f6c6528b96008d65524a459c4dc - () https://git.kernel.org/stable/c/e33d9bd563e71f6c6528b96008d65524a459c4dc - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-04-14 19:44

NVD link : CVE-2022-49358

Mitre link : CVE-2022-49358

CVE.ORG link : CVE-2022-49358

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime