CVE-2022-49920

netfilter: nf_tables: netlink notifier might race to release objects

State: Published
Severity: 7.8 High
Published: May 1, 2025
Updated: Aug 5, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: netlink notifier might race to release objects

commit release path is invoked via call_rcu and it runs lockless to release the objects after rcu grace period. The netlink notifier handler might win race to remove objects that the transaction context is still referencing from the commit release path.

Call rcu_barrier() to ensure pending rcu callbacks run to completion if the list of transactions to be destroyed is not empty.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	6001a930ce0378b62210d4f83583fc88a903d89d to before 1ffe7100411a8b9015115ce124cd6c9c9da6f8e3Affected 6001a930ce0378b62210d4f83583fc88a903d89d to before e40b7c44d19e327ad8b49a491ef1fa8dcc4566e0Affected 6001a930ce0378b62210d4f83583fc88a903d89d to before d4bc8271db21ea9f1c86a1ca4d64999f184d4aaeAffected
LinuxLinux	5.12Affected before 5.12Not affected 5.15.78 through 5.15.Not affected 6.0.8 through 6.0.Not affected 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.