cbcvebase.
CVE-2022-48639
published 2024-04-28

CVE-2022-48639: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tc_new_tfilter() tfilter_put need to be called to…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
14.2th percentile
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tc_new_tfilter() tfilter_put need to be called to put the refount got by tp->ops->get to avoid possible refcount leak when chain->tmplt_ops != NULL and chain->tmplt_ops != tp->ops.

Affected

16 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.0.2-1 (bookworm)linux 6.0.2-1 (bookworm)
linuxlinux
linuxlinux>= 7d5509fa0d3ddfe252b4418513e493ac98de3317 < 903f7d322c17d8e306d766404b4604e81653902a903f7d322c17d8e306d766404b4604e81653902a
linuxlinux>= 7d5509fa0d3ddfe252b4418513e493ac98de3317 < 8844c750eeb03452e2b3319c27a526f447b825968844c750eeb03452e2b3319c27a526f447b82596
linuxlinux>= 7d5509fa0d3ddfe252b4418513e493ac98de3317 < f8162aed962be8fa07445b2b5928e84ab40dd8d7f8162aed962be8fa07445b2b5928e84ab40dd8d7
linuxlinux>= 7d5509fa0d3ddfe252b4418513e493ac98de3317 < 0559d91ee3a2cd81b15ad5cd507539d6da867f880559d91ee3a2cd81b15ad5cd507539d6da867f88
linuxlinux>= 7d5509fa0d3ddfe252b4418513e493ac98de3317 < c2e1cfefcac35e0eea229e148c8284088ce437b5c2e1cfefcac35e0eea229e148c8284088ce437b5
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.148-15.10.148-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 0 < 6.0.2-16.0.2-1
linuxlinux_kernel>= 5.1 < 5.4.2155.4.215
linuxlinux_kernel>= 5.11 < 5.15.715.15.71
linuxlinux_kernel>= 5.16 < 5.19.125.19.12
linuxlinux_kernel>= 5.5 < 5.10.1465.10.146

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.