CVE-2022-48935

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc5-syzkaller

Description The issue is related to the netfilter component of the Linux kernel, specifically with the nf tables subsystem. It involves a use-after-free error in the nf hook entries grow function, which can lead to a denial of service. The vulnerability arises when flowtable hooks are not unregistered before they are released via nf tables flowtable destroy, causing the hook core to report a use-after-free error.

Technical details about exploitation include the nf hook entries grow function and the nf tables flowtable destroy function. The nft register flowtable net hooks and nf tables newflowtable functions are also involved in the vulnerability.

No information is provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.