CVE-2022-49293

netfilter: nf_tables: initialize registers in nft_do_chain()

State: Published
Severity: Not scored
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: initialize registers in nft_do_chain()

Initialize registers to avoid stack leak into userspace.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	96518518cc417bb0a8c80b9fb736202e28acdf96 to before 4d28522acd1c4415c85f6b33463713a268f68965Affected 96518518cc417bb0a8c80b9fb736202e28acdf96 to before a3cc32863b175168283cb0a5fde08de6a1e27df9Affected 96518518cc417bb0a8c80b9fb736202e28acdf96 to before 88791b79a1eb2ba94e95d039243e28433583a67bAffected 96518518cc417bb0a8c80b9fb736202e28acdf96 to before 06f0ff82c70241a766a811ae1acf07d6e2734dcbAffected 96518518cc417bb0a8c80b9fb736202e28acdf96 to before 2c74374c2e88c7b7992bf808d9f9391f7452f9d9Affected 96518518cc417bb0a8c80b9fb736202e28acdf96 to before fafb904156fbb8f1dd34970cd5223e00b47c33beAffected 96518518cc417bb0a8c80b9fb736202e28acdf96 to before 64f24c76dd0ce53d0fa3a0bfb9aeea507c769485Affected 96518518cc417bb0a8c80b9fb736202e28acdf96 to before dd03640529204ef4b8189fbdea08217d8d98271fAffected 96518518cc417bb0a8c80b9fb736202e28acdf96 to before 4c905f6740a365464e91467aa50916555b28213dAffected
LinuxLinux	3.13Affected before 3.13Not affected 4.9.309 through 4.9.Not affected 4.14.274 through 4.14.Not affected 4.19.237 through 4.19.Not affected 5.4.188 through 5.4.Not affected 5.10.109 through 5.10.Not affected 5.15.32 through 5.15.Not affected 5.16.18 through 5.16.Not affected 5.17.1 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

96518518cc417bb0a8c80b9fb736202e28acdf96 to before 4d28522acd1c4415c85f6b33463713a268f68965Affected
96518518cc417bb0a8c80b9fb736202e28acdf96 to before a3cc32863b175168283cb0a5fde08de6a1e27df9Affected
96518518cc417bb0a8c80b9fb736202e28acdf96 to before 88791b79a1eb2ba94e95d039243e28433583a67bAffected
96518518cc417bb0a8c80b9fb736202e28acdf96 to before 06f0ff82c70241a766a811ae1acf07d6e2734dcbAffected
96518518cc417bb0a8c80b9fb736202e28acdf96 to before 2c74374c2e88c7b7992bf808d9f9391f7452f9d9Affected
96518518cc417bb0a8c80b9fb736202e28acdf96 to before fafb904156fbb8f1dd34970cd5223e00b47c33beAffected
96518518cc417bb0a8c80b9fb736202e28acdf96 to before 64f24c76dd0ce53d0fa3a0bfb9aeea507c769485Affected
96518518cc417bb0a8c80b9fb736202e28acdf96 to before dd03640529204ef4b8189fbdea08217d8d98271fAffected
96518518cc417bb0a8c80b9fb736202e28acdf96 to before 4c905f6740a365464e91467aa50916555b28213dAffected

LinuxLinux

3.13Affected
before 3.13Not affected
4.9.309 through 4.9.*Not affected
4.14.274 through 4.14.*Not affected
4.19.237 through 4.19.*Not affected
5.4.188 through 5.4.*Not affected
5.10.109 through 5.10.*Not affected
5.15.32 through 5.15.*Not affected
5.16.18 through 5.16.*Not affected
5.17.1 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.