CVE-2025-22064

netfilter: nf_tables: don't unregister hook when table is dormant

State: Published
Severity: Not scored
Published: Apr 16, 2025
Updated: May 23, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: don't unregister hook when table is dormant

When nf_tables_updchain encounters an error, hook registration needs to be rolled back.

This should only be done if the hook has been registered, which won't happen when the table is flagged as dormant (inactive).

Just move the assignment into the registration block.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b9703ed44ffbfba85c103b9de01886a225e14b38 to before 6134d1ea1e1408e8e7c8c26545b3b301cbdf1edaAffected b9703ed44ffbfba85c103b9de01886a225e14b38 to before feb1fa2a03a27fec7001e93e4223be4120d1784bAffected b9703ed44ffbfba85c103b9de01886a225e14b38 to before 03d1fb457b696c18fe15661440c4f052b2374e7eAffected b9703ed44ffbfba85c103b9de01886a225e14b38 to before ce571eba07d54e3637bf334bc48376fbfa55defeAffected b9703ed44ffbfba85c103b9de01886a225e14b38 to before 688c15017d5cd5aac882400782e7213d40dc3556Affected d131ce7a319d3bff68d5a9d5509bb22e4ce33946Affected 6.3.3 to before 6.4Affected
LinuxLinux	6.4Affected before 6.4Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

b9703ed44ffbfba85c103b9de01886a225e14b38 to before 6134d1ea1e1408e8e7c8c26545b3b301cbdf1edaAffected
b9703ed44ffbfba85c103b9de01886a225e14b38 to before feb1fa2a03a27fec7001e93e4223be4120d1784bAffected
b9703ed44ffbfba85c103b9de01886a225e14b38 to before 03d1fb457b696c18fe15661440c4f052b2374e7eAffected
b9703ed44ffbfba85c103b9de01886a225e14b38 to before ce571eba07d54e3637bf334bc48376fbfa55defeAffected
b9703ed44ffbfba85c103b9de01886a225e14b38 to before 688c15017d5cd5aac882400782e7213d40dc3556Affected
d131ce7a319d3bff68d5a9d5509bb22e4ce33946Affected
6.3.3 to before 6.4Affected

LinuxLinux

6.4Affected
before 6.4Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.