CVE-2022-49293

netfilter: nf_tables: initialize registers in nft_do_chain()

MEDIUM

5.5

CVSS Score

Published: February 26, 2025 at 01:56 AM UTC

Updated: June 17, 2026 at 05:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: initialize registers in nft_do_chain() Initialize registers to avoid stack leak into userspace.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.13 ≤ v < 4.14.2743.13 ≤ v < 4.19.2373.13 ≤ v < 4.9.3093.13 ≤ v < 5.10.1093.13 ≤ v < 5.15.323.13 ≤ v < 5.16.183.13 ≤ v < 5.17.13.13 ≤ v < 5.183.13 ≤ v < 5.4.1884.10 ≤ v < 4.14.2744.15 ≤ v < 4.19.2374.20 ≤ v < 5.4.1885.11 ≤ v < 5.15.325.16 ≤ v < 5.16.185.5 ≤ v < 5.10.1093.13 5.1796518518cc417bb0a8c80b9fb736202e28acdf96

Vendor states this is fixed in 06f0ff82c70241a766a811ae1acf07d6e2734dcb (fixed)

Vendor states this is fixed in 2c74374c2e88c7b7992bf808d9f9391f7452f9d9 (fixed)

Vendor states this is fixed in 4c905f6740a365464e91467aa50916555b28213d (fixed)

Vendor states this is fixed in 4d28522acd1c4415c85f6b33463713a268f68965 (fixed)

Vendor states this is fixed in 64f24c76dd0ce53d0fa3a0bfb9aeea507c769485 (fixed)

Vendor states this is fixed in 88791b79a1eb2ba94e95d039243e28433583a67b (fixed)

Vendor states this is fixed in a3cc32863b175168283cb0a5fde08de6a1e27df9 (fixed)

Vendor states this is fixed in dd03640529204ef4b8189fbdea08217d8d98271f (fixed)

Vendor states this is fixed in fafb904156fbb8f1dd34970cd5223e00b47c33be (fixed)

Vendor states this is fixed in 3.13 (unaffected)

Vendor states this is fixed in 4.14.274 (unaffected)

Vendor states this is fixed in 4.19.237 (unaffected)