CVE-2022-48643

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48643
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() syzbot is reporting underflow of nft_counters_enabled counter at nf_tables_addchain() [1], for commit 43eb8949cfdffa76 ("netfilter: nf_tables: do not leave chain stats enabled on error") missed that nf_tables_chain_destroy() after nft_basechain_init() in the error path of nf_tables_addchain() decrements the counter because nft_basechain_init() makes nft_is_base_chain() return true by setting NFT_CHAIN_BASE flag. Increment the counter immediately after returning from nft_basechain_init().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378 Patch
https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91 Patch
https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d Patch
https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd Patch
https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378 Patch
https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91 Patch
https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d Patch
https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*
History

18 Sep 2025, 14:06

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-191
References () https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378 - () https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378 - Patch
References () https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91 - () https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91 - Patch
References () https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d - () https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d - Patch
References () https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd - () https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd - Patch

21 Nov 2024, 07:33

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nf_tables: corrige el desbordamiento de nft_counters_enabled en nf_tables_addchain() syzbot informa el desbordamiento del contador nft_counters_enabled en nf_tables_addchain() [1], para el commit 43eb8949cfdffa76 ("netfilter: nf_tables: no salir estadísticas de cadena habilitadas en caso de error") pasó por alto que nf_tables_chain_destroy() después de nft_basechain_init() en la ruta de error de nf_tables_addchain() disminuye el contador porque nft_basechain_init() hace que nft_is_base_chain() devuelva verdadero al configurar el indicador NFT_CHAIN_BASE. Incrementa el contador inmediatamente después de regresar de nft_basechain_init().
References () https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378 - () https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378 -
References () https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91 - () https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91 -
References () https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d - () https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d -
References () https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd - () https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd -

28 Apr 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-28 13:15

Updated : 2025-09-18 14:06

NVD link : CVE-2022-48643

Mitre link : CVE-2022-48643

CVE.ORG link : CVE-2022-48643

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-191

Integer Underflow (Wrap or Wraparound)