CVE-2022-49358

Summary

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: memleak flow rule from commit path

Abort path release flow rule object, however, commit path does not. Update code to destroy these objects before releasing the transaction.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc9626a2cbdb20e26587b3fad99960520a023432b < 5b8d63489c3b701eb2a76f848ec94d8cbc9373b9affected
LinuxLinuxc9626a2cbdb20e26587b3fad99960520a023432b < 330c0c6cd2150a2d7f47af16aa590078b0d2f736affected
LinuxLinuxc9626a2cbdb20e26587b3fad99960520a023432b < e33d9bd563e71f6c6528b96008d65524a459c4dcaffected
LinuxLinuxc9626a2cbdb20e26587b3fad99960520a023432b < 80de9ea1f5b808a6601e91111fae601df2b26369affected
LinuxLinuxc9626a2cbdb20e26587b3fad99960520a023432b < ab9f34a30c23f656e76f4c5b83125a4e7b53c86eaffected
LinuxLinuxc9626a2cbdb20e26587b3fad99960520a023432b < 9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3affected
LinuxLinux5.3affected
LinuxLinux0 < 5.3unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References