CVE-2022-48641 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab
https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e
https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33
https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9
https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1
https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f
https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee
https://lore.kernel.org/linux-cve-announce/2024042856-CVE-2022-48641-531f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48641
https://www.cve.org/CVERecord?id=CVE-2022-48641

History

Thu, 12 Sep 2024 20:30:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-28T12:59:53.047Z

Updated: 2024-09-11T17:32:47.581Z

Reserved: 2024-02-25T13:44:28.316Z

Link: CVE-2022-48641

Vulnrichment

Updated: 2024-08-03T15:17:55.593Z

NVD

Status : Awaiting Analysis

Published: 2024-04-28T13:15:06.950

Modified: 2024-04-29T12:42:03.667

Link: CVE-2022-48641

Redhat

Severity : Low

Publid Date: 2024-04-28T00:00:00Z

Links: CVE-2022-48641 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-48641", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-25T13:44:28.316Z", "datePublished": "2024-04-28T12:59:53.047Z", "dateUpdated": "2024-09-11T17:32:47.581Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:10:42.624Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix memory leak when blob is malformed\n\nThe bug fix was incomplete, it \"replaced\" crash with a memory leak.\nThe old code had an assignment to \"ret\" embedded into the conditional,\nrestore this."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bridge/netfilter/ebtables.c"], "versions": [{"version": "afd01382594d", "lessThan": "754e8b74281d", "status": "affected", "versionType": "git"}, {"version": "358765beb836", "lessThan": "1e98318af2f1", "status": "affected", "versionType": "git"}, {"version": "160c4eb47db0", "lessThan": "11ebf32fde46", "status": "affected", "versionType": "git"}, {"version": "624c30521233", "lessThan": "ebd97dbe3c55", "status": "affected", "versionType": "git"}, {"version": "1b2c5428f773", "lessThan": "d5917b7af7ca", "status": "affected", "versionType": "git"}, {"version": "e53cfa017bf4", "lessThan": "38cf372b17f0", "status": "affected", "versionType": "git"}, {"version": "7997eff82828", "lessThan": "62ce44c4fff9", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bridge/netfilter/ebtables.c"], "versions": [{"version": "4.14.292", "lessThan": "4.14.295", "status": "affected", "versionType": "custom"}, {"version": "4.19.257", "lessThan": "4.19.260", "status": "affected", "versionType": "custom"}, {"version": "5.4.212", "lessThan": "5.4.215", "status": "affected", "versionType": "custom"}, {"version": "5.10.140", "lessThan": "5.10.146", "status": "affected", "versionType": "custom"}, {"version": "5.15.64", "lessThan": "5.15.71", "status": "affected", "versionType": "custom"}, {"version": "5.19.6", "lessThan": "5.19.12", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1"}, {"url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e"}, {"url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab"}, {"url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee"}, {"url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f"}, {"url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33"}, {"url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9"}], "title": "netfilter: ebtables: fix memory leak when blob is malformed", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.593Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48641", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:46:20.766456Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:32:47.581Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.593Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48641", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:46:20.766456Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:12.444Z"}}], "cna": {"title": "netfilter: ebtables: fix memory leak when blob is malformed", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "afd01382594d", "lessThan": "754e8b74281d", "versionType": "git"}, {"status": "affected", "version": "358765beb836", "lessThan": "1e98318af2f1", "versionType": "git"}, {"status": "affected", "version": "160c4eb47db0", "lessThan": "11ebf32fde46", "versionType": "git"}, {"status": "affected", "version": "624c30521233", "lessThan": "ebd97dbe3c55", "versionType": "git"}, {"status": "affected", "version": "1b2c5428f773", "lessThan": "d5917b7af7ca", "versionType": "git"}, {"status": "affected", "version": "e53cfa017bf4", "lessThan": "38cf372b17f0", "versionType": "git"}, {"status": "affected", "version": "7997eff82828", "lessThan": "62ce44c4fff9", "versionType": "git"}], "programFiles": ["net/bridge/netfilter/ebtables.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.14.292", "lessThan": "4.14.295", "versionType": "custom"}, {"status": "affected", "version": "4.19.257", "lessThan": "4.19.260", "versionType": "custom"}, {"status": "affected", "version": "5.4.212", "lessThan": "5.4.215", "versionType": "custom"}, {"status": "affected", "version": "5.10.140", "lessThan": "5.10.146", "versionType": "custom"}, {"status": "affected", "version": "5.15.64", "lessThan": "5.15.71", "versionType": "custom"}, {"status": "affected", "version": "5.19.6", "lessThan": "5.19.12", "versionType": "custom"}], "programFiles": ["net/bridge/netfilter/ebtables.c"], "defaultStatus": "unaffected"}], "references": [{"url": "https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1"}, {"url": "https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e"}, {"url": "https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab"}, {"url": "https://git.kernel.org/stable/c/ebd97dbe3c55d68346b9c5fb00634a7f5b10bbee"}, {"url": "https://git.kernel.org/stable/c/d5917b7af7cae0e2804f9d127a03268035098b7f"}, {"url": "https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33"}, {"url": "https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix memory leak when blob is malformed\n\nThe bug fix was incomplete, it \"replaced\" crash with a memory leak.\nThe old code had an assignment to \"ret\" embedded into the conditional,\nrestore this."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:10:42.624Z"}}}, "cveMetadata": {"cveId": "CVE-2022-48641", "state": "PUBLISHED", "dateUpdated": "2024-09-11T17:32:47.581Z", "dateReserved": "2024-02-25T13:44:28.316Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-28T12:59:53.047Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}