CVE-2022-48641 - Vulnerability Details

Vendors	Products
Linux	Linux Kernel

Link	Providers
https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab
https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e
https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33
https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9
https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1
https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f
https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee
https://lore.kernel.org/linux-cve-announce/2024042856-CVE-2022-48641-531f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48641
https://www.cve.org/CVERecord?id=CVE-2022-48641

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		CWE-401
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
Metrics	cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-48641", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-25T13:44:28.316Z", "datePublished": "2024-04-28T12:59:53.047Z", "dateUpdated": "2025-05-04T08:20:18.707Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-04T08:20:18.707Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix memory leak when blob is malformed\n\nThe bug fix was incomplete, it \"replaced\" crash with a memory leak.\nThe old code had an assignment to \"ret\" embedded into the conditional,\nrestore this."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bridge/netfilter/ebtables.c"], "versions": [{"version": "afd01382594d643e1adeb16826423b418cdf8b8b", "lessThan": "754e8b74281dd54a324698803483f47cf3355ae1", "status": "affected", "versionType": "git"}, {"version": "358765beb836f5fc2ed26b5df4140d5d3548ac11", "lessThan": "1e98318af2f163eadaff815abcef38d27ca92c1e", "status": "affected", "versionType": "git"}, {"version": "160c4eb47db03b96c0c425358e7595ebefe8094d", "lessThan": "11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab", "status": "affected", "versionType": "git"}, {"version": "624c30521233e110cf50ba01980a591e045036ae", "lessThan": "ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee", "status": "affected", "versionType": "git"}, {"version": "1b2c5428f773d60c116c7b1e390432e0cfb63cd6", "lessThan": "d5917b7af7cae0e2804f9d127a03268035098b7f", "status": "affected", "versionType": "git"}, {"version": "e53cfa017bf4575d0b948a8f45313ef66d897136", "lessThan": "38cf372b17f0a5f35c1b716a100532d539f0eb33", "status": "affected", "versionType": "git"}, {"version": "7997eff82828304b780dc0a39707e1946d6f1ebf", "lessThan": "62ce44c4fff947eebdf10bb582267e686e6835c9", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bridge/netfilter/ebtables.c"], "versions": [{"version": "4.14.292", "lessThan": "4.14.295", "status": "affected", "versionType": "semver"}, {"version": "4.19.257", "lessThan": "4.19.260", "status": "affected", "versionType": "semver"}, {"version": "5.4.212", "lessThan": "5.4.215", "status": "affected", "versionType": "semver"}, {"version": "5.10.140", "lessThan": "5.10.146", "status": "affected", "versionType": "semver"}, {"version": "5.15.64", "lessThan": "5.15.71", "status": "affected", "versionType": "semver"}, {"version": "5.19.6", "lessThan": "5.19.12", "status": "affected", "versionType": "semver"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14.292", "versionEndExcluding": "4.14.295"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.257", "versionEndExcluding": "4.19.260"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.212", "versionEndExcluding": "5.4.215"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.140", "versionEndExcluding": "5.10.146"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.64", "versionEndExcluding": "5.15.71"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19.6", "versionEndExcluding": "5.19.12"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1"}, {"url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e"}, {"url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab"}, {"url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee"}, {"url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f"}, {"url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33"}, {"url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9"}], "title": "netfilter: ebtables: fix memory leak when blob is malformed", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.593Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48641", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:46:20.766456Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:32:47.581Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2022-48641 (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

state : PUBLISHED (string)

assignerShortName : Linux (string)

dateReserved : 2024-02-25T13:44:28.316Z (string)

datePublished : 2024-04-28T12:59:53.047Z (string)

dateUpdated : 2025-05-04T08:20:18.707Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2025-05-04T08:20:18.707Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this. (string)

}

]

affected : [ »

0 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : unaffected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : net/bridge/netfilter/ebtables.c (string)

]

versions : [ »

0 : { »

version : afd01382594d643e1adeb16826423b418cdf8b8b (string)

lessThan : 754e8b74281dd54a324698803483f47cf3355ae1 (string)

status : affected (string)

versionType : git (string)

}

1 : { »

version : 358765beb836f5fc2ed26b5df4140d5d3548ac11 (string)

lessThan : 1e98318af2f163eadaff815abcef38d27ca92c1e (string)

status : affected (string)

versionType : git (string)

}

2 : { »

version : 160c4eb47db03b96c0c425358e7595ebefe8094d (string)

lessThan : 11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab (string)

status : affected (string)

versionType : git (string)

}

3 : { »

version : 624c30521233e110cf50ba01980a591e045036ae (string)

lessThan : ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee (string)

status : affected (string)

versionType : git (string)

}

4 : { »

version : 1b2c5428f773d60c116c7b1e390432e0cfb63cd6 (string)

lessThan : d5917b7af7cae0e2804f9d127a03268035098b7f (string)

status : affected (string)

versionType : git (string)

}

5 : { »

version : e53cfa017bf4575d0b948a8f45313ef66d897136 (string)

lessThan : 38cf372b17f0a5f35c1b716a100532d539f0eb33 (string)

status : affected (string)

versionType : git (string)

}

6 : { »

version : 7997eff82828304b780dc0a39707e1946d6f1ebf (string)

lessThan : 62ce44c4fff947eebdf10bb582267e686e6835c9 (string)

status : affected (string)

versionType : git (string)

}

]

}

1 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : unaffected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : net/bridge/netfilter/ebtables.c (string)

]

versions : [ »

0 : { »

version : 4.14.292 (string)

lessThan : 4.14.295 (string)

status : affected (string)

versionType : semver (string)

}

1 : { »

version : 4.19.257 (string)

lessThan : 4.19.260 (string)

status : affected (string)

versionType : semver (string)

}

2 : { »

version : 5.4.212 (string)

lessThan : 5.4.215 (string)

status : affected (string)

versionType : semver (string)

}

3 : { »

version : 5.10.140 (string)

lessThan : 5.10.146 (string)

status : affected (string)

versionType : semver (string)

}

4 : { »

version : 5.15.64 (string)

lessThan : 5.15.71 (string)

status : affected (string)

versionType : semver (string)

}

5 : { »

version : 5.19.6 (string)

lessThan : 5.19.12 (string)

status : affected (string)

versionType : semver (string)

}

]

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

operator : OR (string)

negate : false (boolean)

cpeMatch : [ »

0 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.14.292 (string)

versionEndExcluding : 4.14.295 (string)

}

1 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 4.19.257 (string)

versionEndExcluding : 4.19.260 (string)

}

2 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.4.212 (string)

versionEndExcluding : 5.4.215 (string)

}

3 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.10.140 (string)

versionEndExcluding : 5.10.146 (string)

}

4 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.15.64 (string)

versionEndExcluding : 5.15.71 (string)

}

5 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 5.19.6 (string)

versionEndExcluding : 5.19.12 (string)

}

]

}

]

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1 (string)

}

1 : { »

url : https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e (string)

}

2 : { »

url : https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab (string)

}

3 : { »

url : https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee (string)

}

4 : { »

url : https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f (string)

}

5 : { »

url : https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33 (string)

}

6 : { »

url : https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9 (string)

}

]

title : netfilter: ebtables: fix memory leak when blob is malformed (string)

x_generator : { »

engine : bippy-1.2.0 (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T15:17:55.593Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33 (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2022-48641 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-10T15:46:20.766456Z (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-11T17:32:47.581Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.593Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48641", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:46:20.766456Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:12.444Z"}}], "cna": {"title": "netfilter: ebtables: fix memory leak when blob is malformed", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "afd01382594d643e1adeb16826423b418cdf8b8b", "lessThan": "754e8b74281dd54a324698803483f47cf3355ae1", "versionType": "git"}, {"status": "affected", "version": "358765beb836f5fc2ed26b5df4140d5d3548ac11", "lessThan": "1e98318af2f163eadaff815abcef38d27ca92c1e", "versionType": "git"}, {"status": "affected", "version": "160c4eb47db03b96c0c425358e7595ebefe8094d", "lessThan": "11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab", "versionType": "git"}, {"status": "affected", "version": "624c30521233e110cf50ba01980a591e045036ae", "lessThan": "ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee", "versionType": "git"}, {"status": "affected", "version": "1b2c5428f773d60c116c7b1e390432e0cfb63cd6", "lessThan": "d5917b7af7cae0e2804f9d127a03268035098b7f", "versionType": "git"}, {"status": "affected", "version": "e53cfa017bf4575d0b948a8f45313ef66d897136", "lessThan": "38cf372b17f0a5f35c1b716a100532d539f0eb33", "versionType": "git"}, {"status": "affected", "version": "7997eff82828304b780dc0a39707e1946d6f1ebf", "lessThan": "62ce44c4fff947eebdf10bb582267e686e6835c9", "versionType": "git"}], "programFiles": ["net/bridge/netfilter/ebtables.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.14.292", "lessThan": "4.14.295", "versionType": "semver"}, {"status": "affected", "version": "4.19.257", "lessThan": "4.19.260", "versionType": "semver"}, {"status": "affected", "version": "5.4.212", "lessThan": "5.4.215", "versionType": "semver"}, {"status": "affected", "version": "5.10.140", "lessThan": "5.10.146", "versionType": "semver"}, {"status": "affected", "version": "5.15.64", "lessThan": "5.15.71", "versionType": "semver"}, {"status": "affected", "version": "5.19.6", "lessThan": "5.19.12", "versionType": "semver"}], "programFiles": ["net/bridge/netfilter/ebtables.c"], "defaultStatus": "unaffected"}], "references": [{"url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1"}, {"url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e"}, {"url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab"}, {"url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee"}, {"url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f"}, {"url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33"}, {"url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix memory leak when blob is malformed\n\nThe bug fix was incomplete, it \"replaced\" crash with a memory leak.\nThe old code had an assignment to \"ret\" embedded into the conditional,\nrestore this."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.14.295", "versionStartIncluding": "4.14.292"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.19.260", "versionStartIncluding": "4.19.257"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.215", "versionStartIncluding": "5.4.212"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.146", "versionStartIncluding": "5.10.140"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.71", "versionStartIncluding": "5.15.64"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.19.12", "versionStartIncluding": "5.19.6"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-04T08:20:18.707Z"}}}, "cveMetadata": {"cveId": "CVE-2022-48641", "state": "PUBLISHED", "dateUpdated": "2025-05-04T08:20:18.707Z", "dateReserved": "2024-02-25T13:44:28.316Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-28T12:59:53.047Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33 (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T15:17:55.593Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2022-48641 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-10T15:46:20.766456Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-11T12:42:12.444Z (string)

}

]

cna : { »

title : netfilter: ebtables: fix memory leak when blob is malformed (string)

affected : [ »

0 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : afd01382594d643e1adeb16826423b418cdf8b8b (string)

lessThan : 754e8b74281dd54a324698803483f47cf3355ae1 (string)

versionType : git (string)

}

1 : { »

status : affected (string)

version : 358765beb836f5fc2ed26b5df4140d5d3548ac11 (string)

lessThan : 1e98318af2f163eadaff815abcef38d27ca92c1e (string)

versionType : git (string)

}

2 : { »

status : affected (string)

version : 160c4eb47db03b96c0c425358e7595ebefe8094d (string)

lessThan : 11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab (string)

versionType : git (string)

}

3 : { »

status : affected (string)

version : 624c30521233e110cf50ba01980a591e045036ae (string)

lessThan : ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee (string)

versionType : git (string)

}

4 : { »

status : affected (string)

version : 1b2c5428f773d60c116c7b1e390432e0cfb63cd6 (string)

lessThan : d5917b7af7cae0e2804f9d127a03268035098b7f (string)

versionType : git (string)

}

5 : { »

status : affected (string)

version : e53cfa017bf4575d0b948a8f45313ef66d897136 (string)

lessThan : 38cf372b17f0a5f35c1b716a100532d539f0eb33 (string)

versionType : git (string)

}

6 : { »

status : affected (string)

version : 7997eff82828304b780dc0a39707e1946d6f1ebf (string)

lessThan : 62ce44c4fff947eebdf10bb582267e686e6835c9 (string)

versionType : git (string)

}

]

programFiles : [ »

0 : net/bridge/netfilter/ebtables.c (string)

]

defaultStatus : unaffected (string)

}

1 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.14.292 (string)

lessThan : 4.14.295 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 4.19.257 (string)

lessThan : 4.19.260 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 5.4.212 (string)

lessThan : 5.4.215 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 5.10.140 (string)

lessThan : 5.10.146 (string)

versionType : semver (string)

}

4 : { »

status : affected (string)

version : 5.15.64 (string)

lessThan : 5.15.71 (string)

versionType : semver (string)

}

5 : { »

status : affected (string)

version : 5.19.6 (string)

lessThan : 5.19.12 (string)

versionType : semver (string)

}

]

programFiles : [ »

0 : net/bridge/netfilter/ebtables.c (string)

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1 (string)

}

1 : { »

url : https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e (string)

}

2 : { »

url : https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab (string)

}

3 : { »

url : https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee (string)

}

4 : { »

url : https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f (string)

}

5 : { »

url : https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33 (string)

}

6 : { »

url : https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9 (string)

}

]

x_generator : { »

engine : bippy-1.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this. (string)

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

negate : false (boolean)

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 4.14.295 (string)

versionStartIncluding : 4.14.292 (string)

}

1 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 4.19.260 (string)

versionStartIncluding : 4.19.257 (string)

}

2 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 5.4.215 (string)

versionStartIncluding : 5.4.212 (string)

}

3 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 5.10.146 (string)

versionStartIncluding : 5.10.140 (string)

}

4 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 5.15.71 (string)

versionStartIncluding : 5.15.64 (string)

}

5 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 5.19.12 (string)

versionStartIncluding : 5.19.6 (string)

}

]

operator : OR (string)

}

]

}

]

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2025-05-04T08:20:18.707Z (string)

}

cveMetadata : { »

cveId : CVE-2022-48641 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-04T08:20:18.707Z (string)

dateReserved : 2024-02-25T13:44:28.316Z (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

datePublished : 2024-04-28T12:59:53.047Z (string)

assignerShortName : Linux (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "716DA97D-04B9-453C-974F-AE4E8DAA3F44", "versionEndExcluding": "4.14.295", "versionStartIncluding": "4.14.292", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "222EAB98-7DFB-4D56-B3E1-03D9D708D7C2", "versionEndExcluding": "4.19.260", "versionStartIncluding": "4.19.257", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D8822B45-EFD9-4E7D-B7C0-4B325D460411", "versionEndExcluding": "5.4.215", "versionStartIncluding": "5.4.212", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "46F3A060-702E-4018-94C5-4E7FC03AB0F5", "versionEndExcluding": "5.10.146", "versionStartIncluding": "5.10.140", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E9A066D2-5BB3-49A3-9666-5736C6889680", "versionEndExcluding": "5.15.71", "versionStartIncluding": "5.15.64", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7C38106-1200-4F0A-A144-7F7E34C1383D", "versionEndExcluding": "5.19.12", "versionStartIncluding": "5.19.6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix memory leak when blob is malformed\n\nThe bug fix was incomplete, it \"replaced\" crash with a memory leak.\nThe old code had an assignment to \"ret\" embedded into the conditional,\nrestore this."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: netfilter: ebtables: corrige la p\u00e9rdida de memoria cuando el blob tiene un formato incorrecto La correcci\u00f3n del error estaba incompleta, \"reemplaz\u00f3\" el bloqueo con una p\u00e9rdida de memoria. El c\u00f3digo antiguo ten\u00eda una asignaci\u00f3n para \"ret\" incrustada en el condicional, restaurar esto."}], "id": "CVE-2022-48641", "lastModified": "2025-01-07T16:57:26.363", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-04-28T13:15:06.950", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 716DA97D-04B9-453C-974F-AE4E8DAA3F44 (string)

versionEndExcluding : 4.14.295 (string)

versionStartIncluding : 4.14.292 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 222EAB98-7DFB-4D56-B3E1-03D9D708D7C2 (string)

versionEndExcluding : 4.19.260 (string)

versionStartIncluding : 4.19.257 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D8822B45-EFD9-4E7D-B7C0-4B325D460411 (string)

versionEndExcluding : 5.4.215 (string)

versionStartIncluding : 5.4.212 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 46F3A060-702E-4018-94C5-4E7FC03AB0F5 (string)

versionEndExcluding : 5.10.146 (string)

versionStartIncluding : 5.10.140 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E9A066D2-5BB3-49A3-9666-5736C6889680 (string)

versionEndExcluding : 5.15.71 (string)

versionStartIncluding : 5.15.64 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F7C38106-1200-4F0A-A144-7F7E34C1383D (string)

versionEndExcluding : 5.19.12 (string)

versionStartIncluding : 5.19.6 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this. (string)

}

1 : { »

lang : es (string)

value : En el kernel de Linux, se resolvió la siguiente vulnerabilidad: netfilter: ebtables: corrige la pérdida de memoria cuando el blob tiene un formato incorrecto La corrección del error estaba incompleta, "reemplazó" el bloqueo con una pérdida de memoria. El código antiguo tenía una asignación para "ret" incrustada en el condicional, restaurar esto. (string)

}

]

id : CVE-2022-48641 (string)

lastModified : 2025-01-07T16:57:26.363 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-04-28T13:15:06.950 (string)

references : [ »

0 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab (string)

}

1 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e (string)

}

2 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33 (string)

}

3 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9 (string)

}

4 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1 (string)

}

5 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f (string)

}

6 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee (string)

}

7 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab (string)

}

8 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e (string)

}

9 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33 (string)

}

10 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9 (string)

}

11 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1 (string)

}

12 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f (string)

}

13 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee (string)

}

]

sourceIdentifier : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-401 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "kernel: netfilter: ebtables: fix memory leak when blob is malformed", "id": "2277825", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2277825"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-400", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: ebtables: fix memory leak when blob is malformed\nThe bug fix was incomplete, it \"replaced\" crash with a memory leak.\nThe old code had an assignment to \"ret\" embedded into the conditional,\nrestore this."], "name": "CVE-2022-48641", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-28T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-48641\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-48641\nhttps://lore.kernel.org/linux-cve-announce/2024042856-CVE-2022-48641-531f@gregkh/T"], "threat_severity": "Low"}

{

bugzilla : { »

description : kernel: netfilter: ebtables: fix memory leak when blob is malformed (string)

id : 2277825 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2277825 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 4.4 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-400 (string)

details : [ »

0 : In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this. (string)

]

name : CVE-2022-48641 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

4 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

5 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

6 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2024-04-28T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2022-48641 https://nvd.nist.gov/vuln/detail/CVE-2022-48641 https://lore.kernel.org/linux-cve-announce/2024042856-CVE-2022-48641-531f@gregkh/T (string)

]

threat_severity : Low (string)

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object