CVE-2022-48643

netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() syzbot is reporting underflow of nft_counters_enabled counter at nf_tables_addchain() [1], for commit 43eb8949cfdffa76 ("netfilter: nf_tables: do not leave chain stats enabled on error") missed that nf_tables_chain_destroy() after nft_basechain_init() in the error path of nf_tables_addchain() decrements the counter because nft_basechain_init() makes nft_is_base_chain() return true by setting NFT_CHAIN_BASE flag. Increment the counter immediately after returning from nft_basechain_init().

N/A

CVSS

Severity:

EPSS 0.12%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378
https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d
https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91
https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd

Frequently Asked Questions

What is the severity of CVE-2022-48643?: CVE-2022-48643 has not yet been assigned a CVSS score.
How to fix CVE-2022-48643?: To fix CVE-2022-48643, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-48643 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-48643 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-48643?: CVE-2022-48643 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.