CVE-2022-49919: netfilter: nf_tables: release flow rule object from commit path
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: release flow rule object from commit path
No need to postpone this to the commit release path, since no packets are walking over this object, this is accessed from control plane only. This helped uncovered UAF triggered by races with the netlink notifier.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49919?
CVE-2022-49919 is classified as a moderate vulnerability in the Linux kernel.
How do I fix CVE-2022-49919?
To fix CVE-2022-49919, upgrade to a patched version of the Linux kernel as recommended by your distribution.
What systems are affected by CVE-2022-49919?
CVE-2022-49919 affects various versions of the Linux kernel that utilize the netfilter nf_tables functionality.
What type of vulnerability is CVE-2022-49919?
CVE-2022-49919 is a flow rule object release vulnerability in the netfilter subsystem of the Linux kernel.
Can CVE-2022-49919 be exploited remotely?
CVE-2022-49919 cannot be easily exploited remotely as it primarily involves control plane access.