CVE-2022-48641

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: fix memory leak when blob is malformed

The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= afd01382594d643e1adeb16826423b418cdf8b8b, < 754e8b74281dd54a324698803483f47cf3355ae1; >= 358765beb836f5fc2ed26b5df4140d5d3548ac11, < 1e98318af2f163eadaff815abcef38d27ca92c1e; >= 160c4eb47db03b96c0c425358e7595ebefe8094d, < 11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab; >= 624c30521233e110cf50ba01980a591e045036ae, < ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee; >= 1b2c5428f773d60c116c7b1e390432e0cfb63cd6, < d5917b7af7cae0e2804f9d127a03268035098b7f; >= e53cfa017bf4575d0b948a8f45313ef66d897136, < 38cf372b17f0a5f35c1b716a100532d539f0eb33; >= 7997eff82828304b780dc0a39707e1946d6f1ebf, < 62ce44c4fff947eebdf10bb582267e686e6835c9
LinuxLinux>= 4.14.292, < 4.14.295; >= 4.19.257, < 4.19.260; >= 5.4.212, < 5.4.215; >= 5.10.140, < 5.10.146; >= 5.15.64, < 5.15.71; >= 5.19.6, < 5.19.12

References

Timeline

Published
Apr 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-486425.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() ICVE-2022-486435.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_aCVE-2022-486445.5In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled ICVE-2022-486455.5In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSNCVE-2022-486466.2In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efx_hard_start_xmit Like inCVE-2022-486475.5In the Linux kernel, the following vulnerability has been resolved: sfc: fix TX channel offset when using legacy interrupts In legacy inteCVE-2022-486485.5In the Linux kernel, the following vulnerability has been resolved: sfc: fix null pointer dereference in efx_hard_start_xmit Trying to getCVE-2022-486497.8In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix possible double free of kmem_cache When doing slubCVE-2022-48659.0Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-486504.7In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() Commit 8f39CVE-2022-486517.7In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header If an AFCVE-2022-486525.5In the Linux kernel, the following vulnerability has been resolved: ice: Fix crash by keep old cfg when update TCs more than queues There
CVE-2022-48641: Medium severity, CVSS 5.5 | Vulnix