CVE-2022-50000

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0

Description A vulnerability in the Linux kernel has been resolved, related to the netfilter flowtable. The issue occurs when a flow table entry has pending HW stats or HW add work, causing the flow table cleanup to become stuck. This can lead to a use-after-free error. The vulnerability is fixed by flushing the pending work, setting the teardown flag to all flows in the flowtable, and forcing a garbage collector run to queue work to remove the flows from hardware.

Recommendations For Linux kernel versions prior to 5.12.0, apply the patch that fixes the netfilter flowtable issue by flushing the pending work and forcing a garbage collector run to remove the flows from hardware.