Riskcovery

CVE-2022-50048

netfilter: nf_tables: possible module reference underflow in error path

State
Published
Severity
7.8 High
Published
Jun 18, 2025
Updated
Aug 5, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: possible module reference underflow in error path

dst->ops is set on when nft_expr_clone() fails, but module refcount has not been bumped yet, therefore nft_expr_destroy() leads to module reference underflow.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8cfd9b0f8515e7c361bba27e2a2684cbd427fe01 to before b59bee8b05b0e789b5a298cacb09e8aaa3367a29Affected
  • 8cfd9b0f8515e7c361bba27e2a2684cbd427fe01 to before 1e52e6cfec6342c3d0df47dc3a76724fb3dabf56Affected
  • 8cfd9b0f8515e7c361bba27e2a2684cbd427fe01 to before c485c35ff6783ccd12c160fcac6a0e504e83e0bfAffected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 5.15.63 through 5.15.*Not affected
  • 5.19.4 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.