CVE-2022-49358

netfilter: nf_tables: memleak flow rule from commit path

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: memleak flow rule from commit path Abort path release flow rule object, however, commit path does not. Update code to destroy these objects before releasing the transaction.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.02%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/5b8d63489c3b701eb2a76f848ec94d8cbc9373b9 patch
https://git.kernel.org/stable/c/330c0c6cd2150a2d7f47af16aa590078b0d2f736 patch
https://git.kernel.org/stable/c/e33d9bd563e71f6c6528b96008d65524a459c4dc patch
https://git.kernel.org/stable/c/80de9ea1f5b808a6601e91111fae601df2b26369 patch
https://git.kernel.org/stable/c/ab9f34a30c23f656e76f4c5b83125a4e7b53c86e patch
https://git.kernel.org/stable/c/9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3 patch

Frequently Asked Questions

What is the severity of CVE-2022-49358?
CVE-2022-49358 has been scored as a medium severity vulnerability.
How to fix CVE-2022-49358?
To fix CVE-2022-49358, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49358 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2022-49358 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49358?
CVE-2022-49358 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.