CVE-2025-22064

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: don't unregister hook when table is dormant

When nf_tables_updchain encounters an error, hook registration needs to be rolled back.

This should only be done if the hook has been registered, which won't happen when the table is flagged as dormant (inactive).

Just move the assignment into the registration block.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= b9703ed44ffbfba85c103b9de01886a225e14b38, < 6134d1ea1e1408e8e7c8c26545b3b301cbdf1eda; >= b9703ed44ffbfba85c103b9de01886a225e14b38, < feb1fa2a03a27fec7001e93e4223be4120d1784b; >= b9703ed44ffbfba85c103b9de01886a225e14b38, < 03d1fb457b696c18fe15661440c4f052b2374e7e; >= b9703ed44ffbfba85c103b9de01886a225e14b38, < ce571eba07d54e3637bf334bc48376fbfa55defe; >= b9703ed44ffbfba85c103b9de01886a225e14b38, < 688c15017d5cd5aac882400782e7213d40dc3556; d131ce7a319d3bff68d5a9d5509bb22e4ce33946; >= 6.3.3, < 6.4
LinuxLinux6.4

References

Timeline

Published
Apr 16, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-220655.5In the Linux kernel, the following vulnerability has been resolved: idpf: fix adapter NULL pointer dereference on reboot With SRIOV enableCVE-2025-220665.5In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-card: Add NULL check in imx_card_probe() devm_kasprintf() reCVE-2025-220677.8In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clCVE-2025-220687.8In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk drCVE-2025-220697.8In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument ofCVE-2025-22074.8A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the fileCVE-2025-220705.5In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounteCVE-2025-220715.5In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufs_create_context() Leak fixes back in 2008 miCVE-2025-220725.5In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "[POWERPC] spufs: Fix ganCVE-2025-220735.5In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufs_new_file() failure It's called from spufs_fCVE-2025-220745.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix r_count dec/increment mismatch r_count is only increased whCVE-2025-220755.5In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Allocate vfinfo size for VF GUIDs when supported Commit 30a
CVE-2025-22064: Medium severity, CVSS 5.5 | Vulnix