CVE-2022-49183

net/sched: act_ct: fix ref leak when switching zones

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: Jun 1, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_ct: fix ref leak when switching zones

When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That's because tcf_ct_skb_nfct_cached() returns false and tcf_ct_flow_table_lookup() may simply overwrite it.

The fix is to, as the ct entry is not reusable, free it already at tcf_ct_skb_nfct_cached().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0fc1847359964e95e521cf2bb2b10f8e33dd0970 to before 9222a08be539cbb7a8e0d46cbc7ab9e4db273eb8Affected a95ea90deb3071c1ded77a05e91cfebc5238d908 to before bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33dAffected e9408de00e5ecd0dbe91cf061c7da23711c4febb to before 4bb42d73def9411e5cad885b9811987d72431df1Affected 2f131de361f6d0eaff17db26efdb844c178432f8 to before b24793a37d91aacad7cb9893b226a7924a89636aAffected 2f131de361f6d0eaff17db26efdb844c178432f8 to before bcb74e132a76ce0502bb33d5b65533a4ed72d159Affected 5.10.103 to before 5.10.258Affected 5.15.26 to before 5.15.33Affected 5.16.12 to before 5.16.19Affected
LinuxLinux	5.17Affected before 5.17Not affected 5.10.258 through 5.10.Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

0fc1847359964e95e521cf2bb2b10f8e33dd0970 to before 9222a08be539cbb7a8e0d46cbc7ab9e4db273eb8Affected
a95ea90deb3071c1ded77a05e91cfebc5238d908 to before bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33dAffected
e9408de00e5ecd0dbe91cf061c7da23711c4febb to before 4bb42d73def9411e5cad885b9811987d72431df1Affected
2f131de361f6d0eaff17db26efdb844c178432f8 to before b24793a37d91aacad7cb9893b226a7924a89636aAffected
2f131de361f6d0eaff17db26efdb844c178432f8 to before bcb74e132a76ce0502bb33d5b65533a4ed72d159Affected
5.10.103 to before 5.10.258Affected
5.15.26 to before 5.15.33Affected
5.16.12 to before 5.16.19Affected

LinuxLinux

5.17Affected
before 5.17Not affected
5.10.258 through 5.10.*Not affected
5.15.33 through 5.15.*Not affected
5.16.19 through 5.16.*Not affected
5.17.2 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.