CVE-2022-48654

netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

State: Published
Severity: 7.1 High
Published: Apr 28, 2024
Updated: Aug 5, 2026
Reserved: Feb 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux
3.1	5.3 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 721ea8ac063d70c2078c4e762212705de6151764Affected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 5d75fef3e61e797fab5c3fbba88caa74ab92ad47Affected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 816eab147e5c6f6621922b8515ad9010ceb1735eAffected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 633c81c0449663f57d4138326d036dc6cfad674eAffected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 559c36c5a8d730c49ef805a72b213d3bba155cc8Affected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.215 through 5.4.Not affected 5.10.146 through 5.10.Not affected 5.15.71 through 5.15.Not affected 5.19.12 through 5.19.Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 721ea8ac063d70c2078c4e762212705de6151764Affected
22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 5d75fef3e61e797fab5c3fbba88caa74ab92ad47Affected
22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 816eab147e5c6f6621922b8515ad9010ceb1735eAffected
22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 633c81c0449663f57d4138326d036dc6cfad674eAffected
22c7652cdaa8cd33ce78bacceb4e826a3f795873 to before 559c36c5a8d730c49ef805a72b213d3bba155cc8Affected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.215 through 5.4.*Not affected
5.10.146 through 5.10.*Not affected
5.15.71 through 5.15.*Not affected
5.19.12 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.