Back
CVE-2022-49561
netfilter: conntrack: re-fetch conntrack after insertion
Critical9.8EPSS 0.82%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: re-fetch conntrack after insertion In case the conntrack is clashing, insertion can free skb->_nfct and set skb->_nfct to the already-confirmed entry. This wasn't found before because the conntrack entry and the extension space used to free'd after an rcu grace period, plus the race needs events enabled to trigger.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.82% · top 43% of all CVEs (7 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Affected products
- affected 71d8c47fc653711c41bc3282e5b0e605b3727956 – < e97222b785e70e8973281666d709baad6523d8af
- affected 71d8c47fc653711c41bc3282e5b0e605b3727956 – < 92a999d1963eed0df666284e20055136ceabd12f
- affected 71d8c47fc653711c41bc3282e5b0e605b3727956 – < b16bb373988da3ceb0308381634117e18b6ec60d
- affected 71d8c47fc653711c41bc3282e5b0e605b3727956 – < 91a36ec160ec1a0c8f5352b772dffcbb0b6023e3
- affected 71d8c47fc653711c41bc3282e5b0e605b3727956 – < 01989d7eebb61c99bd4b88ebc8e261bd2f02caed
- affected 71d8c47fc653711c41bc3282e5b0e605b3727956 – < 04f9e9104c969d8ce10a4a43634f641ed082092d
- affected 71d8c47fc653711c41bc3282e5b0e605b3727956 – < 04e4a11dc723c52db7a36dc58f0d69ce6426f8f0
- affected 71d8c47fc653711c41bc3282e5b0e605b3727956 – < 56b14ecec97f39118bf85c9ac2438c5a949509ed
- affected 4.7
- unaffected < 4.7
- unaffected 4.14.282 – ≤ 4.14.*
- unaffected 4.19.246 – ≤ 4.19.*
- unaffected 5.4.197 – ≤ 5.4.*
- unaffected 5.10.120 – ≤ 5.10.*
- unaffected 5.15.45 – ≤ 5.15.*
- unaffected 5.17.13 – ≤ 5.17.*
- unaffected 5.18.2 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References (8)
- https://git.kernel.org/stable/c/e97222b785e70e8973281666d709baad6523d8af (opens in a new tab)
- https://git.kernel.org/stable/c/92a999d1963eed0df666284e20055136ceabd12f (opens in a new tab)
- https://git.kernel.org/stable/c/b16bb373988da3ceb0308381634117e18b6ec60d (opens in a new tab)
- https://git.kernel.org/stable/c/91a36ec160ec1a0c8f5352b772dffcbb0b6023e3 (opens in a new tab)
- https://git.kernel.org/stable/c/01989d7eebb61c99bd4b88ebc8e261bd2f02caed (opens in a new tab)
- https://git.kernel.org/stable/c/04f9e9104c969d8ce10a4a43634f641ed082092d (opens in a new tab)
- https://git.kernel.org/stable/c/04e4a11dc723c52db7a36dc58f0d69ce6426f8f0 (opens in a new tab)
- https://git.kernel.org/stable/c/56b14ecec97f39118bf85c9ac2438c5a949509ed (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49561)Record last updated .