CVE-2022-49558

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49558
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: double hook unregistration in netns path __nft_release_hooks() is called from pre_netns exit path which unregisters the hooks, then the NETDEV_UNREGISTER event is triggered which unregisters the hooks again. [ 565.221461] WARNING: CPU: 18 PID: 193 at net/netfilter/core.c:495 __nf_unregister_net_hook+0x247/0x270 [...] [ 565.246890] CPU: 18 PID: 193 Comm: kworker/u64:1 Tainted: G E 5.18.0-rc7+ #27 [ 565.253682] Workqueue: netns cleanup_net [ 565.257059] RIP: 0010:__nf_unregister_net_hook+0x247/0x270 [...] [ 565.297120] Call Trace: [ 565.300900] <TASK> [ 565.304683] nf_tables_flowtable_event+0x16a/0x220 [nf_tables] [ 565.308518] raw_notifier_call_chain+0x63/0x80 [ 565.312386] unregister_netdevice_many+0x54f/0xb50 Unregister and destroy netdev hook from netns pre_exit via kfree_rcu so the NETDEV_UNREGISTER path see unregistered hooks.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3fac8ce48fa9fd61ee9056d3ed48b2edefca8b82 Patch
https://git.kernel.org/stable/c/86c0154f4c3a56c5db8b9dd09e3ce885382c2c19 Patch
https://git.kernel.org/stable/c/9c413a8c8bb49cc16796371805ecb260e885bb2b Patch
https://git.kernel.org/stable/c/a3940dcf552f2393d1e8f263b386593f98abe829 Patch
https://git.kernel.org/stable/c/b09e6ccf0d12f9356e8e3508d3e3dce126298538 Patch
https://git.kernel.org/stable/c/f9a43007d3f7ba76d5e7f9421094f00f2ef202f8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.11:-:*:*:*:*:*:*
History

22 Oct 2025, 17:26

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/3fac8ce48fa9fd61ee9056d3ed48b2edefca8b82 - () https://git.kernel.org/stable/c/3fac8ce48fa9fd61ee9056d3ed48b2edefca8b82 - Patch
References () https://git.kernel.org/stable/c/86c0154f4c3a56c5db8b9dd09e3ce885382c2c19 - () https://git.kernel.org/stable/c/86c0154f4c3a56c5db8b9dd09e3ce885382c2c19 - Patch
References () https://git.kernel.org/stable/c/9c413a8c8bb49cc16796371805ecb260e885bb2b - () https://git.kernel.org/stable/c/9c413a8c8bb49cc16796371805ecb260e885bb2b - Patch
References () https://git.kernel.org/stable/c/a3940dcf552f2393d1e8f263b386593f98abe829 - () https://git.kernel.org/stable/c/a3940dcf552f2393d1e8f263b386593f98abe829 - Patch
References () https://git.kernel.org/stable/c/b09e6ccf0d12f9356e8e3508d3e3dce126298538 - () https://git.kernel.org/stable/c/b09e6ccf0d12f9356e8e3508d3e3dce126298538 - Patch
References () https://git.kernel.org/stable/c/f9a43007d3f7ba76d5e7f9421094f00f2ef202f8 - () https://git.kernel.org/stable/c/f9a43007d3f7ba76d5e7f9421094f00f2ef202f8 - Patch
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:5.11:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

19 Jun 2025, 13:15

Type Values Removed Values Added
References
  • {'url': 'https://git.kernel.org/stable/c/c73955a09408e7374d9abfd0e78ce3de9cda0635', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nf_tables: doble anulación del registro de gancho en la ruta netns __nft_release_hooks() se llama desde la ruta de salida pre_netns, lo que anula el registro de los ganchos; luego, se activa el evento NETDEV_UNREGISTER, que anula el registro de los ganchos nuevamente. [ 565.221461] WARNING: CPU: 18 PID: 193 at net/netfilter/core.c:495 __nf_unregister_net_hook+0x247/0x270 [...] [ 565.246890] CPU: 18 PID: 193 Comm: kworker/u64:1 Tainted: G E 5.18.0-rc7+ #27 [ 565.253682] Workqueue: netns cleanup_net [ 565.257059] RIP: 0010:__nf_unregister_net_hook+0x247/0x270 [...] [ 565.297120] Call Trace: [ 565.300900] [ 565.304683] nf_tables_flowtable_event+0x16a/0x220 [nf_tables] [ 565.308518] raw_notifier_call_chain+0x63/0x80 [ 565.312386] unregister_netdevice_many+0x54f/0xb50 Anule el registro y destruya el gancho netdev de netns pre_exit a través de kfree_rcu para que la ruta NETDEV_UNREGISTER vea los ganchos no registrados.

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-22 17:26

NVD link : CVE-2022-49558

Mitre link : CVE-2022-49558

CVE.ORG link : CVE-2022-49558

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo