Back
CVE-2022-49293
netfilter: nf_tables: initialize registers in nft_do_chain()
Medium5.5EPSS 0.29%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: initialize registers in nft_do_chain() Initialize registers to avoid stack leak into userspace.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.29% · top 79% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < 4d28522acd1c4415c85f6b33463713a268f68965
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < a3cc32863b175168283cb0a5fde08de6a1e27df9
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < 88791b79a1eb2ba94e95d039243e28433583a67b
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < 06f0ff82c70241a766a811ae1acf07d6e2734dcb
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < 2c74374c2e88c7b7992bf808d9f9391f7452f9d9
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < fafb904156fbb8f1dd34970cd5223e00b47c33be
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < 64f24c76dd0ce53d0fa3a0bfb9aeea507c769485
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < dd03640529204ef4b8189fbdea08217d8d98271f
- affected 96518518cc417bb0a8c80b9fb736202e28acdf96 – < 4c905f6740a365464e91467aa50916555b28213d
- affected 3.13
- unaffected < 3.13
- unaffected 4.9.309 – ≤ 4.9.*
- unaffected 4.14.274 – ≤ 4.14.*
- unaffected 4.19.237 – ≤ 4.19.*
- unaffected 5.4.188 – ≤ 5.4.*
- unaffected 5.10.109 – ≤ 5.10.*
- unaffected 5.15.32 – ≤ 5.15.*
- unaffected 5.16.18 – ≤ 5.16.*
- unaffected 5.17.1 – ≤ 5.17.*
- unaffected 5.18 – ≤ *
References (9)
- https://git.kernel.org/stable/c/4d28522acd1c4415c85f6b33463713a268f68965 (opens in a new tab)
- https://git.kernel.org/stable/c/a3cc32863b175168283cb0a5fde08de6a1e27df9 (opens in a new tab)
- https://git.kernel.org/stable/c/88791b79a1eb2ba94e95d039243e28433583a67b (opens in a new tab)
- https://git.kernel.org/stable/c/06f0ff82c70241a766a811ae1acf07d6e2734dcb (opens in a new tab)
- https://git.kernel.org/stable/c/2c74374c2e88c7b7992bf808d9f9391f7452f9d9 (opens in a new tab)
- https://git.kernel.org/stable/c/fafb904156fbb8f1dd34970cd5223e00b47c33be (opens in a new tab)
- https://git.kernel.org/stable/c/64f24c76dd0ce53d0fa3a0bfb9aeea507c769485 (opens in a new tab)
- https://git.kernel.org/stable/c/dd03640529204ef4b8189fbdea08217d8d98271f (opens in a new tab)
- https://git.kernel.org/stable/c/4c905f6740a365464e91467aa50916555b28213d (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49293)Record last updated .