Riskcovery

CVE-2022-50001

netfilter: nft_tproxy: restrict to prerouting hook

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_tproxy: restrict to prerouting hook

TPROXY is only allowed from prerouting, but nft_tproxy doesn't check this. This fixes a crash (null dereference) when using tproxy from e.g. output.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4ed8eb6570a49931c705512060acd50058d61616 to before 0b21edf4cc13516716848e0a4fdf726aa2a62cd9Affected
  • 4ed8eb6570a49931c705512060acd50058d61616 to before 83ef55c4281f1b4c6bd4457c2e96ccd1c9e80200Affected
  • 4ed8eb6570a49931c705512060acd50058d61616 to before eaba3f9b672c3a3f820da8ee9584b9520674eafaAffected
  • 4ed8eb6570a49931c705512060acd50058d61616 to before 9a1d92cbeac3335fee99fa865b8c5b0f2e71a8f7Affected
  • 4ed8eb6570a49931c705512060acd50058d61616 to before 343fed6b0daeb528ae5c9d4d84d9ff763ac95619Affected
  • 4ed8eb6570a49931c705512060acd50058d61616 to before 18bbc3213383a82b05383827f4b1b882e3f0a5a5Affected
LinuxLinux
  • 4.19Affected
  • before 4.19Not affected
  • 4.19.273 through 4.19.*Not affected
  • 5.4.232 through 5.4.*Not affected
  • 5.10.169 through 5.10.*Not affected
  • 5.15.95 through 5.15.*Not affected
  • 5.19.6 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.