CVE-2022-48911

Published: Aug 22, 2024Modified: Aug 4, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() side seems suspect, because there is no guarantee that sk_refcnt is not already 0. On failure, we cannot queue the packet and need to indicate an error. The packet will be dropped by the caller. v2: split skb prefetch hunk into separate change

Affected (13)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	2.6.29 ≤ version < 4.9.305
Linux Linux Kernel	4.10 ≤ version < 4.14.270
Linux Linux Kernel	4.15 ≤ version < 4.19.233
Linux Linux Kernel	4.20 ≤ version < 5.4.183
Linux Linux Kernel	5.11 ≤ version < 5.15.27
Linux Linux Kernel	5.16 ≤ version < 5.16.13
Linux Linux Kernel	5.5 ≤ version < 5.10.104
Linux Linux Kernel	Version 5.17 rc1
Linux Linux Kernel	Version 5.17 rc2
Linux Linux Kernel	Version 5.17 rc3
Linux Linux Kernel	Version 5.17 rc4
Linux Linux Kernel	Version 5.17 rc5
Linux Linux Kernel	Version 5.17 rc6