Vulnerability details

CVE-2022-50048

Linux Linux

netfilter: nf_tables: possible module reference underflow in error path

CVSS 3.1
7.8High

Official description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: possible module reference underflow in error path dst->ops is set on when nft_expr_clone() fails, but module refcount has not been bumped yet, therefore nft_expr_destroy() leads to module reference underflow.

CVSS scores

ScoreVersionSourceVector
7.8High 3.1 CVEProject cvelistV5 (CNA) (Linux) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Linux Linux 5.11 CVEProject cvelistV5 (CNA)
Linux Linux 8cfd9b0f8515e7c361bba27e2a2684cbd427fe01 ≤ v < b59bee8b05b0e789b5a298cacb09e8aaa3367a29 CVEProject cvelistV5 (CNA)
Linux Linux 8cfd9b0f8515e7c361bba27e2a2684cbd427fe01 ≤ v < 1e52e6cfec6342c3d0df47dc3a76724fb3dabf56 CVEProject cvelistV5 (CNA)
Linux Linux 8cfd9b0f8515e7c361bba27e2a2684cbd427fe01 ≤ v < c485c35ff6783ccd12c160fcac6a0e504e83e0bf CVEProject cvelistV5 (CNA)

References and advisories

3
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-06-18
Last updated
2026-08-05
State
Published
Assigner (CNA)
Linux

Exploit prediction (EPSS)

0.2%
Probability of exploitation in 30 days
10.1%
Percentile (among all CVEs)

Weaknesses (CWE)

  • —