Linux Kernel Vulnerability CVE-2022-50048: Module Reference Underflow in Netfilter
Summary
CVE-2022-50048: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: possible module reference underflow in error path dst->ops is set on when nft_expr_clone() fails, but module refcount has not been... Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is widely used in various distributions, including Debian. The kernel's netfilter subsystem is responsible for packet filtering, network address translation, and other networking-related tasks. This vulnerability affects the netfilter's nf_tables, which is a framework for packet filtering and classification.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the netfilter subsystem where a possible module reference underflow can occur during error handling. Specifically, when the function nft_expr_clone() fails, the dst->ops is set without incrementing the module reference count. This oversight can lead to nft_expr_destroy() being called with an incorrect reference count, potentially causing system instability or crashes due to the underflow.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2022-50048 is a significant vulnerability in the Linux kernel that can lead to module reference underflow, potentially destabilizing systems. Users are advised to update to the patched version 6.0.2-1 to ensure their systems remain secure.
See every vulnerability recorded for linux →
FAQ
CVE-2022-50048 is a vulnerability in the Linux kernel's netfilter subsystem that can lead to module reference underflow.
This vulnerability can cause system instability or crashes due to incorrect handling of module reference counts.
The vulnerability affects the Linux kernel versions prior to 6.0.2-1 in Debian 12 and 13.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds, it is crucial to monitor for updates and apply the patch as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
