In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: memleak flow rule from commit path Abort path release flow rule object, however, commit path does not. Update code to destroy these objects before releasing the transaction.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/330c0c6cd2150a2d7f47af16aa590078b0d2f736 cve-icon cve-icon
https://git.kernel.org/stable/c/5b8d63489c3b701eb2a76f848ec94d8cbc9373b9 cve-icon cve-icon
https://git.kernel.org/stable/c/80de9ea1f5b808a6601e91111fae601df2b26369 cve-icon cve-icon
https://git.kernel.org/stable/c/9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3 cve-icon cve-icon
https://git.kernel.org/stable/c/ab9f34a30c23f656e76f4c5b83125a4e7b53c86e cve-icon cve-icon
https://git.kernel.org/stable/c/e33d9bd563e71f6c6528b96008d65524a459c4dc cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022643-CVE-2022-49358-6cfd@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49358 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49358 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 14 Apr 2025 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: memleak flow rule from commit path Abort path release flow rule object, however, commit path does not. Update code to destroy these objects before releasing the transaction.
Title netfilter: nf_tables: memleak flow rule from commit path
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T02:11:07.432Z

Updated: 2025-10-01T19:46:54.001Z

Reserved: 2025-02-26T02:08:31.546Z

Link: CVE-2022-49358

cve-icon Vulnrichment

Updated: 2025-10-01T16:45:26.691Z

cve-icon NVD

Status : Modified

Published: 2025-02-26T07:01:12.487

Modified: 2025-10-01T20:16:12.230

Link: CVE-2022-49358

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49358 - Bugzilla