PT-2025-8111 · Linux+3 · Linux Kernel+3

·

CVE-2022-49183

·

Published

2022-01-01

·

Updated

2026-08-23

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A reference leak occurs in the Linux kernel when switching zones or network namespaces without clearing the connection tracking (ct) entry in between. This happens because tcf ct skb nfct cached() returns false and tcf ct flow table lookup() may overwrite the old ct entry. The issue arises from the ct entry not being reusable.
Recommendations To resolve the issue, apply the fix that frees the ct entry at tcf ct skb nfct cached() to prevent reference leaks when switching zones or network namespaces.

Exploit

Fix

Incorrect Privilege Assignment

Information Disclosure

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13750
CVE-2022-49183
OESA-2025-1963
OESA-2025-1964
SUSE-SU-2025:1176-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1

Affected Products

Astra Linux
Debian
Linux Kernel
Suse