CVE-2025-22110: netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlinkqueue: Initialize ctx to avoid memory allocation error
It is possible that ctx in nfqnlbuildpacketmessage() could be used before it is properly initialize, which is only initialized by nfqnlgetsksecctx().
This patch corrects this problem by initializing the lsmctx to a safe value when it is declared.
This is similar to the commit 35fcac7a7c25 ("audit: Initialize lsmctx to avoid memory allocation error").
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22110?
CVE-2025-22110 has been rated as having a moderate severity due to the potential for memory allocation errors.
How do I fix CVE-2025-22110?
To fix CVE-2025-22110, update to the latest version of the Linux kernel where the vulnerability has been addressed.
What kind of systems are affected by CVE-2025-22110?
CVE-2025-22110 affects systems running the Linux kernel that utilize nfnetlink_queue.
What is the impact of CVE-2025-22110?
The impact of CVE-2025-22110 may include potential memory corruption leading to application crashes or undefined behavior.
When was CVE-2025-22110 resolved?
CVE-2025-22110 was resolved with commits in the Linux kernel as of early 2025.