CVE-2022-49358

netfilter: nf_tables: memleak flow rule from commit path

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: memleak flow rule from commit path

Abort path release flow rule object, however, commit path does not.

Update code to destroy these objects before releasing the transaction.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.6th percentile
Published
2025-02-26T02:11Z
EPSS history
Timeline
  • 26 FEB 02:11Z
    netfilter: nf_tables: memleak flow rule from commit path
    cvelistv5