VYPR
Unrated severityNVD Advisory· Published Aug 22, 2024· Updated May 4, 2025

netfilter: nf_queue: fix possible use-after-free

CVE-2022-48911

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_queue: fix possible use-after-free

Eric Dumazet says: The sock_hold() side seems suspect, because there is no guarantee that sk_refcnt is not already 0.

On failure, we cannot queue the packet and need to indicate an error. The packet will be dropped by the caller.

v2: split skb prefetch hunk into separate change

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

195

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.