CVE-2022-49183
published 2025-02-26CVE-2022-49183: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix ref leak when switching zones When switching zones or network…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.27%
18.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_ct: fix ref leak when switching zones
When switching zones or network namespaces without doing a ct clear in
between, it is now leaking a reference to the old ct entry. That's
because tcf_ct_skb_nfct_cached() returns false and
tcf_ct_flow_table_lookup() may simply overwrite it.
The fix is to, as the ct entry is not reusable, free it already at
tcf_ct_skb_nfct_cached().
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 0fc1847359964e95e521cf2bb2b10f8e33dd0970 < 9222a08be539cbb7a8e0d46cbc7ab9e4db273eb8 | 9222a08be539cbb7a8e0d46cbc7ab9e4db273eb8 |
| linux | linux | >= 2f131de361f6d0eaff17db26efdb844c178432f8 < b24793a37d91aacad7cb9893b226a7924a89636a | b24793a37d91aacad7cb9893b226a7924a89636a |
| linux | linux | >= 2f131de361f6d0eaff17db26efdb844c178432f8 < bcb74e132a76ce0502bb33d5b65533a4ed72d159 | bcb74e132a76ce0502bb33d5b65533a4ed72d159 |
| linux | linux | >= 5.10.103 < 5.10.258 | 5.10.258 |
| linux | linux | >= 5.15.26 < 5.15.33 | 5.15.33 |
| linux | linux | >= 5.16.12 < 5.16.19 | 5.16.19 |
| linux | linux | >= a95ea90deb3071c1ded77a05e91cfebc5238d908 < bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33d | bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33d |
| linux | linux | >= e9408de00e5ecd0dbe91cf061c7da23711c4febb < 4bb42d73def9411e5cad885b9811987d72431df1 | 4bb42d73def9411e5cad885b9811987d72431df1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 5.10.103 < 5.11 | 5.11 |
| linux | linux_kernel | >= 5.15.26 < 5.15.33 | 5.15.33 |
| linux | linux_kernel | 5.16.12 – 5.16.19 | — |
| linux | linux_kernel | 5.17 – 5.17.2 | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.15.32/5.16.18/5.17.1 tcf_ct_skb_nfct_cached information disclosure
vuldb·2026-06-01·CVSS 5.5
CVE-2022-49183 [MEDIUM] Linux Kernel up to 5.15.32/5.16.18/5.17.1 tcf_ct_skb_nfct_cached information disclosure
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.15.32/5.16.18/5.17.1. This vulnerability affects the function tcf_ct_skb_nfct_cached. This manipulation causes information disclosure.
This vulnerability is tracked as CVE-2022-49183. The attack is only possible within the local network. No exploit exists.
It is advisable to upgrade the affected component.
GHSA
GHSA-h8cc-85qr-g7ff: In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_ct: fix ref leak when switching zones
When switching zones or net
ghsa_unreviewed·2025-03-17
CVE-2022-49183 [MEDIUM] GHSA-h8cc-85qr-g7ff: In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_ct: fix ref leak when switching zones
When switching zones or net
In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_ct: fix ref leak when switching zones
When switching zones or network namespaces without doing a ct clear in
between, it is now leaking a reference to the old ct entry. That's
because tcf_ct_skb_nfct_cached() returns false and
tcf_ct_flow_table_lookup() may simply overwrite it.
The fix is to, as the ct entry is not reusable, free it already at
tcf_ct_skb_nfct_cached().
OSV
CVE-2022-49183: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix ref leak when switching zones When switching zones or netwo
osv·2025-02-26·CVSS 5.5
CVE-2022-49183 [MEDIUM] CVE-2022-49183: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix ref leak when switching zones When switching zones or netwo
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix ref leak when switching zones When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That's because tcf_ct_skb_nfct_cached() returns false and tcf_ct_flow_table_lookup() may simply overwrite it. The fix is to, as the ct entry is not reusable, free it already at tcf_ct_skb_nfct_cached().
Red Hat
kernel: net/sched: act_ct: fix ref leak when switching zones
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49183 [MEDIUM] CWE-401 kernel: net/sched: act_ct: fix ref leak when switching zones
kernel: net/sched: act_ct: fix ref leak when switching zones
In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_ct: fix ref leak when switching zones
When switching zones or network namespaces without doing a ct clear in
between, it is now leaking a reference to the old ct entry. That's
because tcf_ct_skb_nfct_cached() returns false and
tcf_ct_flow_table_lookup() may simply overwrite it.
The fix is to, as the ct entry is not reusable, free it already at
tcf_ct_skb_nfct_cached().
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterpris
Debian
CVE-2022-49183: linux - In the Linux kernel, the following vulnerability has been resolved: net/sched: ...
vendor_debian·2022·CVSS 5.5
CVE-2022-49183 [MEDIUM] CVE-2022-49183: linux - In the Linux kernel, the following vulnerability has been resolved: net/sched: ...
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix ref leak when switching zones When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That's because tcf_ct_skb_nfct_cached() returns false and tcf_ct_flow_table_lookup() may simply overwrite it. The fix is to, as the ct entry is not reusable, free it already at tcf_ct_skb_nfct_cached().
Scope: local
bookworm: resolved (fixed in 5.17.3-1)
bullseye: open
forky: resolved (fixed in 5.17.3-1)
sid: resolved (fixed in 5.17.3-1)
trixie: resolved (fixed in 5.17.3-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/4bb42d73def9411e5cad885b9811987d72431df1https://git.kernel.org/stable/c/9222a08be539cbb7a8e0d46cbc7ab9e4db273eb8https://git.kernel.org/stable/c/b24793a37d91aacad7cb9893b226a7924a89636ahttps://git.kernel.org/stable/c/bcb74e132a76ce0502bb33d5b65533a4ed72d159https://git.kernel.org/stable/c/bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33d
2025-02-26
Published