CVE-2025-22064: netfilter: nf_tables: don't unregister hook when table is dormant
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: don't unregister hook when table is dormant
When nftablesupdchain encounters an error, hook registration needs to be rolled back.
This should only be done if the hook has been registered, which won't happen when the table is flagged as dormant (inactive).
Just move the assignment into the registration block.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22064?
CVE-2025-22064 is classified as a moderate severity vulnerability due to potential issues with hook registration in the Linux kernel.
What impact does CVE-2025-22064 have on system security?
CVE-2025-22064 may allow an attacker to influence the packet processing behavior of the system, potentially leading to denial of service.
How do I fix CVE-2025-22064?
To resolve CVE-2025-22064, update the Linux kernel to the latest version where the vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2025-22064?
CVE-2025-22064 affects various versions of the Linux kernel prior to the security patches being applied.
Is CVE-2025-22064 a known issue in specific Linux distributions?
Yes, CVE-2025-22064 has been acknowledged in multiple Linux distributions that utilize the affected versions of the Linux kernel.