CVE-2022-50001

netfilter: nft_tproxy: restrict to prerouting hook

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_tproxy: restrict to prerouting hook

TPROXY is only allowed from prerouting, but nft_tproxy doesn't check this.

This fixes a crash (null dereference) when using tproxy from e.g. output.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Published
2025-06-18T11:01Z
EPSS history
Timeline
  • 18 JUN 11:01Z
    netfilter: nft_tproxy: restrict to prerouting hook
    cvelistv5