CVE-2022-49561
critical · 9.8In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb->_nfct and set skb->_nfct to the already-confirmed entry. This wasn't found before because the conntrack entry and the extension space used to free'd after an rcu grace period, plus the race needs events enabled to trigger.
9.8
CVSS
0.8%
EPSS (exploit prob.)
56th
EPSS percentile
2025-02-26
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel | >= 4.7, < 4.14.282 |
| linux | linux_kernel | >= 4.15, < 4.19.246 |
| linux | linux_kernel | >= 4.20, < 5.4.197 |
| linux | linux_kernel | >= 5.5, < 5.10.120 |
| linux | linux_kernel | >= 5.11, < 5.15.45 |
| linux | linux_kernel | >= 5.16, < 5.17.13 |
| linux | linux_kernel | >= 5.18, < 5.18.2 |
Check a specific version with /api/v1/cve/match.
References
- https://git.kernel.org/stable/c/01989d7eebb61c99bd4b88ebc8e261bd2f02caed
- https://git.kernel.org/stable/c/04e4a11dc723c52db7a36dc58f0d69ce6426f8f0
- https://git.kernel.org/stable/c/04f9e9104c969d8ce10a4a43634f641ed082092d
- https://git.kernel.org/stable/c/56b14ecec97f39118bf85c9ac2438c5a949509ed
- https://git.kernel.org/stable/c/91a36ec160ec1a0c8f5352b772dffcbb0b6023e3
- https://git.kernel.org/stable/c/92a999d1963eed0df666284e20055136ceabd12f
- https://git.kernel.org/stable/c/b16bb373988da3ceb0308381634117e18b6ec60d
- https://git.kernel.org/stable/c/e97222b785e70e8973281666d709baad6523d8af
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-49561