PT-2025-25927

CVE-2022-50001

Published

2022-08-23

Updated

2026-10-18

Description by

CVSS 4.0

6.8

Medium

MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel's netfilter, specifically the nft tproxy component. TPROXY is only allowed from the prerouting hook, but nft tproxy does not enforce this restriction. This oversight can lead to a crash, characterized by a null dereference, when tproxy is used from other hooks, such as the output hook.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors