CVE-2022-49698

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the use of prandom instead of get random u32 in the netfilter component. This could potentially lead to a bug when updating per-cpu rnd state from a user context. The problem was identified in the nft ng random eval function, which is part of the nft numgen module. To fix this, the random driver is used instead, which also eliminates the need for a local prandom state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.