CVE-2022-49622

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49622
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49622.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49622
Downstream
Published
2025-02-26T02:23:39Z
Modified
2025-10-14T23:35:15.398797Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
netfilter: nf_tables: avoid skb access on nf_stolen
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nftables: avoid skb access on nfstolen

When verdict is NF_STOLEN, the skb might have been freed.

When tracing is enabled, this can result in a use-after-free: 1. access to skb->nf_trace 2. access to skb->mark 3. computation of trace id 4. dump of packet payload

To avoid 1, keep a cached copy of skb->nf_trace in the trace state struct. Refresh this copy whenever verdict is != STOLEN.

Avoid 2 by skipping skb->mark access if verdict is STOLEN.

3 is avoided by precomputing the trace id.

Only dump the packet when verdict is not "STOLEN".

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
0016d5d46d7440729a3132f61a8da3bf7f84e2ba
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
e34b9ed96ce3b06c79bf884009b16961ca478f87

Affected versions

v2.*

v2.6.12
v2.6.12-rc2
v2.6.12-rc3
v2.6.12-rc4
v2.6.12-rc5
v2.6.12-rc6
v2.6.13
v2.6.13-rc1
v2.6.13-rc2
v2.6.13-rc3
v2.6.13-rc4
v2.6.13-rc5
v2.6.13-rc6
v2.6.13-rc7
v2.6.14
v2.6.14-rc1
v2.6.14-rc2
v2.6.14-rc3
v2.6.14-rc4
v2.6.14-rc5
v2.6.15
v2.6.15-rc1
v2.6.15-rc2
v2.6.15-rc3
v2.6.15-rc4
v2.6.15-rc5
v2.6.15-rc6
v2.6.15-rc7
v2.6.16
v2.6.16-rc1
v2.6.16-rc2
v2.6.16-rc3
v2.6.16-rc4
v2.6.16-rc5
v2.6.16-rc6
v2.6.17
v2.6.17-rc1
v2.6.17-rc2
v2.6.17-rc3
v2.6.17-rc4
v2.6.17-rc5
v2.6.17-rc6
v2.6.18
v2.6.18-rc1
v2.6.18-rc2
v2.6.18-rc3
v2.6.18-rc4
v2.6.18-rc5
v2.6.18-rc6
v2.6.18-rc7
v2.6.19
v2.6.19-rc1
v2.6.19-rc2
v2.6.19-rc3
v2.6.19-rc4
v2.6.19-rc5
v2.6.19-rc6
v2.6.20
v2.6.20-rc1
v2.6.20-rc2
v2.6.20-rc3
v2.6.20-rc4
v2.6.20-rc5
v2.6.20-rc6
v2.6.20-rc7
v2.6.21
v2.6.21-rc1
v2.6.21-rc2
v2.6.21-rc3
v2.6.21-rc4
v2.6.21-rc5
v2.6.21-rc6
v2.6.21-rc7
v2.6.22
v2.6.22-rc1
v2.6.22-rc2
v2.6.22-rc3
v2.6.22-rc4
v2.6.22-rc5
v2.6.22-rc6
v2.6.22-rc7
v2.6.23
v2.6.23-rc1
v2.6.23-rc2
v2.6.23-rc3
v2.6.23-rc4
v2.6.23-rc5
v2.6.23-rc6
v2.6.23-rc7
v2.6.23-rc8
v2.6.23-rc9
v2.6.24
v2.6.24-rc1
v2.6.24-rc2
v2.6.24-rc3
v2.6.24-rc4
v2.6.24-rc5
v2.6.24-rc6
v2.6.24-rc7
v2.6.24-rc8
v2.6.25
v2.6.25-rc1
v2.6.25-rc2
v2.6.25-rc3
v2.6.25-rc4
v2.6.25-rc5
v2.6.25-rc6
v2.6.25-rc7
v2.6.25-rc8
v2.6.25-rc9
v2.6.26
v2.6.26-rc1
v2.6.26-rc2
v2.6.26-rc3
v2.6.26-rc4
v2.6.26-rc5
v2.6.26-rc6
v2.6.26-rc7
v2.6.26-rc8
v2.6.26-rc9
v2.6.27
v2.6.27-rc1
v2.6.27-rc2
v2.6.27-rc3
v2.6.27-rc4
v2.6.27-rc5
v2.6.27-rc6
v2.6.27-rc7
v2.6.27-rc8
v2.6.27-rc9
v2.6.28
v2.6.28-rc1
v2.6.28-rc2
v2.6.28-rc3
v2.6.28-rc4
v2.6.28-rc5
v2.6.28-rc6
v2.6.28-rc7
v2.6.28-rc8
v2.6.28-rc9
v2.6.29
v2.6.29-rc1
v2.6.29-rc2
v2.6.29-rc3
v2.6.29-rc4
v2.6.29-rc5
v2.6.29-rc6
v2.6.29-rc7
v2.6.29-rc8
v2.6.30
v2.6.30-rc1
v2.6.30-rc2
v2.6.30-rc3
v2.6.30-rc4
v2.6.30-rc5
v2.6.30-rc6
v2.6.30-rc7
v2.6.30-rc8
v2.6.31
v2.6.31-rc1
v2.6.31-rc2
v2.6.31-rc3
v2.6.31-rc4
v2.6.31-rc5
v2.6.31-rc6
v2.6.31-rc7
v2.6.31-rc8
v2.6.31-rc9
v2.6.32
v2.6.32-rc1
v2.6.32-rc2
v2.6.32-rc3
v2.6.32-rc4
v2.6.32-rc5
v2.6.32-rc6
v2.6.32-rc7
v2.6.32-rc8
v2.6.33
v2.6.33-rc1
v2.6.33-rc2
v2.6.33-rc3
v2.6.33-rc4
v2.6.33-rc5
v2.6.33-rc6
v2.6.33-rc7
v2.6.33-rc8
v2.6.34
v2.6.34-rc1
v2.6.34-rc2
v2.6.34-rc3
v2.6.34-rc4
v2.6.34-rc5
v2.6.34-rc6
v2.6.34-rc7
v2.6.35
v2.6.35-rc1
v2.6.35-rc2
v2.6.35-rc3
v2.6.35-rc4
v2.6.35-rc5
v2.6.35-rc6
v2.6.36
v2.6.36-rc1
v2.6.36-rc2
v2.6.36-rc3
v2.6.36-rc4
v2.6.36-rc5
v2.6.36-rc6
v2.6.36-rc7
v2.6.36-rc8
v2.6.37
v2.6.37-rc1
v2.6.37-rc2
v2.6.37-rc3
v2.6.37-rc4
v2.6.37-rc5
v2.6.37-rc6
v2.6.37-rc7
v2.6.37-rc8
v2.6.38
v2.6.38-rc1
v2.6.38-rc2
v2.6.38-rc3
v2.6.38-rc4
v2.6.38-rc5
v2.6.38-rc6
v2.6.38-rc7
v2.6.38-rc8
v2.6.39
v2.6.39-rc1
v2.6.39-rc2
v2.6.39-rc3
v2.6.39-rc4
v2.6.39-rc5
v2.6.39-rc6
v2.6.39-rc7

v3.*

v3.0
v3.0-rc1
v3.0-rc2
v3.0-rc3
v3.0-rc4
v3.0-rc5
v3.0-rc6
v3.0-rc7
v3.1
v3.1-rc1
v3.1-rc10
v3.1-rc2
v3.1-rc3
v3.1-rc4
v3.1-rc5
v3.1-rc6
v3.1-rc7
v3.1-rc8
v3.1-rc9
v3.10
v3.10-rc1
v3.10-rc2
v3.10-rc3
v3.10-rc4
v3.10-rc5
v3.10-rc6
v3.10-rc7
v3.11
v3.11-rc1
v3.11-rc2
v3.11-rc3
v3.11-rc4
v3.11-rc5
v3.11-rc6
v3.11-rc7
v3.12
v3.12-rc1
v3.12-rc2
v3.12-rc3
v3.12-rc4
v3.12-rc5
v3.12-rc6
v3.12-rc7
v3.13
v3.13-rc1
v3.13-rc2
v3.13-rc3
v3.13-rc4
v3.13-rc5
v3.13-rc6
v3.13-rc7
v3.13-rc8
v3.14
v3.14-rc1
v3.14-rc2
v3.14-rc3
v3.14-rc4
v3.14-rc5
v3.14-rc6
v3.14-rc7
v3.14-rc8
v3.15
v3.15-rc1
v3.15-rc2
v3.15-rc3
v3.15-rc4
v3.15-rc5
v3.15-rc6
v3.15-rc7
v3.15-rc8
v3.16
v3.16-rc1
v3.16-rc2
v3.16-rc3
v3.16-rc4
v3.16-rc5
v3.16-rc6
v3.16-rc7
v3.17
v3.17-rc1
v3.17-rc2
v3.17-rc3
v3.17-rc4
v3.17-rc5
v3.17-rc6
v3.17-rc7
v3.18
v3.18-rc1
v3.18-rc2
v3.18-rc3
v3.18-rc4
v3.18-rc5
v3.18-rc6
v3.18-rc7
v3.19
v3.19-rc1
v3.19-rc2
v3.19-rc3
v3.19-rc4
v3.19-rc5
v3.19-rc6
v3.19-rc7
v3.2
v3.2-rc1
v3.2-rc2
v3.2-rc3
v3.2-rc4
v3.2-rc5
v3.2-rc6
v3.2-rc7
v3.3
v3.3-rc1
v3.3-rc2
v3.3-rc3
v3.3-rc4
v3.3-rc5
v3.3-rc6
v3.3-rc7
v3.4
v3.4-rc1
v3.4-rc2
v3.4-rc3
v3.4-rc4
v3.4-rc5
v3.4-rc6
v3.4-rc7
v3.5
v3.5-rc1
v3.5-rc2
v3.5-rc3
v3.5-rc4
v3.5-rc5
v3.5-rc6
v3.5-rc7
v3.6
v3.6-rc1
v3.6-rc2
v3.6-rc3
v3.6-rc4
v3.6-rc5
v3.6-rc6
v3.6-rc7
v3.7
v3.7-rc1
v3.7-rc2
v3.7-rc3
v3.7-rc4
v3.7-rc5
v3.7-rc6
v3.7-rc7
v3.7-rc8
v3.8
v3.8-rc1
v3.8-rc2
v3.8-rc3
v3.8-rc4
v3.8-rc5
v3.8-rc6
v3.8-rc7
v3.9
v3.9-rc1
v3.9-rc2
v3.9-rc3
v3.9-rc4
v3.9-rc5
v3.9-rc6
v3.9-rc7
v3.9-rc8

v4.*

v4.0
v4.0-rc1
v4.0-rc2
v4.0-rc3
v4.0-rc4
v4.0-rc5
v4.0-rc6
v4.0-rc7
v4.1
v4.1-rc1
v4.1-rc2
v4.1-rc3
v4.1-rc4
v4.1-rc5
v4.1-rc6
v4.1-rc7
v4.1-rc8
v4.10
v4.10-rc1
v4.10-rc2
v4.10-rc3
v4.10-rc4
v4.10-rc5
v4.10-rc6
v4.10-rc7
v4.10-rc8
v4.11
v4.11-rc1
v4.11-rc2
v4.11-rc3
v4.11-rc4
v4.11-rc5
v4.11-rc6
v4.11-rc7
v4.11-rc8
v4.12
v4.12-rc1
v4.12-rc2
v4.12-rc3
v4.12-rc4
v4.12-rc5
v4.12-rc6
v4.12-rc7
v4.13
v4.13-rc1
v4.13-rc2
v4.13-rc3
v4.13-rc4
v4.13-rc5
v4.13-rc6
v4.13-rc7
v4.14
v4.14-rc1
v4.14-rc2
v4.14-rc3
v4.14-rc4
v4.14-rc5
v4.14-rc6
v4.14-rc7
v4.14-rc8
v4.15
v4.15-rc1
v4.15-rc2
v4.15-rc3
v4.15-rc4
v4.15-rc5
v4.15-rc6
v4.15-rc7
v4.15-rc8
v4.15-rc9
v4.16
v4.16-rc1
v4.16-rc2
v4.16-rc3
v4.16-rc4
v4.16-rc5
v4.16-rc6
v4.16-rc7
v4.17
v4.17-rc1
v4.17-rc2
v4.17-rc3
v4.17-rc4
v4.17-rc5
v4.17-rc6
v4.17-rc7
v4.18
v4.18-rc1
v4.18-rc2
v4.18-rc3
v4.18-rc4
v4.18-rc5
v4.18-rc6
v4.18-rc7
v4.18-rc8
v4.19
v4.19-rc1
v4.19-rc2
v4.19-rc3
v4.19-rc4
v4.19-rc5
v4.19-rc6
v4.19-rc7
v4.19-rc8
v4.2
v4.2-rc1
v4.2-rc2
v4.2-rc3
v4.2-rc4
v4.2-rc5
v4.2-rc6
v4.2-rc7
v4.2-rc8
v4.20
v4.20-rc1
v4.20-rc2
v4.20-rc3
v4.20-rc4
v4.20-rc5
v4.20-rc6
v4.20-rc7
v4.3
v4.3-rc1
v4.3-rc2
v4.3-rc3
v4.3-rc4
v4.3-rc5
v4.3-rc6
v4.3-rc7
v4.4
v4.4-rc1
v4.4-rc2
v4.4-rc3
v4.4-rc4
v4.4-rc5
v4.4-rc6
v4.4-rc7
v4.4-rc8
v4.5
v4.5-rc1
v4.5-rc2
v4.5-rc3
v4.5-rc4
v4.5-rc5
v4.5-rc6
v4.5-rc7
v4.6
v4.6-rc1
v4.6-rc2
v4.6-rc3
v4.6-rc4
v4.6-rc5
v4.6-rc6
v4.6-rc7
v4.7
v4.7-rc1
v4.7-rc2
v4.7-rc3
v4.7-rc4
v4.7-rc5
v4.7-rc6
v4.7-rc7
v4.8
v4.8-rc1
v4.8-rc2
v4.8-rc3
v4.8-rc4
v4.8-rc5
v4.8-rc6
v4.8-rc7
v4.8-rc8
v4.9
v4.9-rc1
v4.9-rc2
v4.9-rc3
v4.9-rc4
v4.9-rc5
v4.9-rc6
v4.9-rc7
v4.9-rc8

v5.*

v5.0
v5.0-rc1
v5.0-rc2
v5.0-rc3
v5.0-rc4
v5.0-rc5
v5.0-rc6
v5.0-rc7
v5.0-rc8
v5.1
v5.1-rc1
v5.1-rc2
v5.1-rc3
v5.1-rc4
v5.1-rc5
v5.1-rc6
v5.1-rc7
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.10
v5.18.11
v5.18.12
v5.18.2
v5.18.3
v5.18.4
v5.18.5
v5.18.6
v5.18.7
v5.18.8
v5.18.9
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.2
v5.2-rc1
v5.2-rc2
v5.2-rc3
v5.2-rc4
v5.2-rc5
v5.2-rc6
v5.2-rc7
v5.3
v5.3-rc1
v5.3-rc2
v5.3-rc3
v5.3-rc4
v5.3-rc5
v5.3-rc6
v5.3-rc7
v5.3-rc8
v5.4
v5.4-rc1
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

Database specific

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_trace.c",
                "function": "nft_trace_init"
            },
            "id": "CVE-2022-49622-047d5561",
            "digest": {
                "length": 251.0,
                "function_hash": "330482719423693018478356319583688017884"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_core.c",
                "function": "__nft_trace_verdict"
            },
            "id": "CVE-2022-49622-19e27fcd",
            "digest": {
                "length": 293.0,
                "function_hash": "66060635111994115686302384484609840522"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "include/net/netfilter/nf_tables.h"
            },
            "id": "CVE-2022-49622-24bb2a4a",
            "digest": {
                "line_hashes": [
                    "164820833715891089430184564785028889275",
                    "200940400721543839762420151036735805897",
                    "118113393231762589433366377953713669425",
                    "54020392689208143623504546745308650516",
                    "85441613818882597557832833086338323922",
                    "11812697784434621440681581343628432920",
                    "239705040021757267959585679731928969780",
                    "252594741057405697496408856982411658531",
                    "19462155902581124022434460782969241449",
                    "156868702792929834528859585034229871725",
                    "65611644060413813995278861081267931656",
                    "160414367320171713645363714503034645117"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_trace.c",
                "function": "nft_trace_notify"
            },
            "id": "CVE-2022-49622-24e2ead9",
            "digest": {
                "length": 2562.0,
                "function_hash": "119681140788185333669753154498851536395"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_core.c",
                "function": "nft_do_chain"
            },
            "id": "CVE-2022-49622-35acf00b",
            "digest": {
                "length": 2253.0,
                "function_hash": "269605491729668309442624848586485874471"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_core.c",
                "function": "__nft_trace_verdict"
            },
            "id": "CVE-2022-49622-35e5ff49",
            "digest": {
                "length": 293.0,
                "function_hash": "66060635111994115686302384484609840522"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_core.c",
                "function": "nft_do_chain"
            },
            "id": "CVE-2022-49622-3e26cecc",
            "digest": {
                "length": 2253.0,
                "function_hash": "269605491729668309442624848586485874471"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_core.c",
                "function": "nft_trace_packet"
            },
            "id": "CVE-2022-49622-5903d8d8",
            "digest": {
                "length": 214.0,
                "function_hash": "71292364106710235414886505454262471407"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_core.c",
                "function": "nft_trace_packet"
            },
            "id": "CVE-2022-49622-610e5b68",
            "digest": {
                "length": 214.0,
                "function_hash": "71292364106710235414886505454262471407"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "include/net/netfilter/nf_tables.h"
            },
            "id": "CVE-2022-49622-76c4c8ef",
            "digest": {
                "line_hashes": [
                    "164820833715891089430184564785028889275",
                    "200940400721543839762420151036735805897",
                    "118113393231762589433366377953713669425",
                    "54020392689208143623504546745308650516",
                    "85441613818882597557832833086338323922",
                    "11812697784434621440681581343628432920",
                    "239705040021757267959585679731928969780",
                    "252594741057405697496408856982411658531",
                    "19462155902581124022434460782969241449",
                    "156868702792929834528859585034229871725",
                    "65611644060413813995278861081267931656",
                    "160414367320171713645363714503034645117"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "net/netfilter/nf_tables_trace.c"
            },
            "id": "CVE-2022-49622-7a6cba36",
            "digest": {
                "line_hashes": [
                    "112573555139394341497496207643559392122",
                    "265018912672193395106970308952311978852",
                    "266951602148770075296920863563431912544",
                    "174437108363517973859093196803565065672",
                    "17677002644239492613511571206489099110",
                    "138107863240210609169325082741362259925",
                    "124503076535032389901032250867481441214",
                    "34698789541638229716428422901493529634",
                    "331332738799357948562261678428023775000",
                    "276826460583371861633963282342491336359",
                    "175664592867271560833418350094017011594",
                    "204341131149065529181549010560798703288",
                    "145374939959010136076424949908473977717",
                    "101386063591314308870872699336182957622",
                    "68770076623121180900584736020398953379",
                    "267375781911331498147565612728845830807",
                    "67402557639863747572015807255895892538",
                    "140355612406939506687515504277035561965",
                    "87858885598674333154149937079569089489",
                    "165732936879055949359753626198748151746",
                    "45265009341918954828213574831855596116",
                    "33419016807162284601185579804903038670",
                    "4008867844914369143196094787050148884",
                    "234986327914479601709647457761381466352",
                    "290887436104906707356646474987089784171",
                    "27104795994654543112660781693195216953",
                    "121969753021042877103581038353661166792",
                    "151599107193761269424004443101411981003",
                    "29390823275584317218944417107030465906",
                    "123353503012982767612913034618283678006",
                    "55131440927415274675617751215539317879",
                    "258546113887812335904528052859572131171",
                    "228815672884959773405432403592208719057",
                    "211269168317580140792427002859677601429",
                    "12635470102639118176488967450408437545",
                    "244623440397478328830319720785446064363",
                    "150339330293163503707154501204872381213",
                    "27736187645930695006544991992042287454",
                    "160032143339765378266566031260607997739",
                    "32052844614438474760601650518674840463",
                    "254767618210901140325905158201504012759",
                    "170050129539913281595505152867018255036"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "net/netfilter/nf_tables_core.c"
            },
            "id": "CVE-2022-49622-959ad7ae",
            "digest": {
                "line_hashes": [
                    "32806092703404758483965756521800882649",
                    "260698652475501382684759315798531755620",
                    "294555209443196156520796894328301697310",
                    "67639628731641480778203134258453790289",
                    "320087673500643029714244478067117181866",
                    "168194400176864880639671762167593745933",
                    "165328386161619603716715296629591833703",
                    "189104234499585682790267922995868078654",
                    "270451213015291951255486753501034006626",
                    "229961065602964675245193658159508967032",
                    "81273795513494881375291264235746378517",
                    "55094196363542917302401432735874600768",
                    "117113930887454860928512290186484602020",
                    "46996468251123633801357573371854511615",
                    "227728038524494311098461850943359987381",
                    "68941321321663807187290636122673628069",
                    "225196333380054918580511700844625462912",
                    "28498120536529437713815178693239141291",
                    "317355023993589560315082541678532110427",
                    "154460556756945023019382914666338313923",
                    "185397923448994712102288621940256555944",
                    "188046381736330780996061052948756248888",
                    "216395038589649220358093645214771235788",
                    "65567061381397010610671765809513087854",
                    "39854772893343308684456954500758379911",
                    "310156560240515062752050667798583513303",
                    "6874233498191789047083140067338474496"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_core.c",
                "function": "__nft_trace_packet"
            },
            "id": "CVE-2022-49622-a17a6146",
            "digest": {
                "length": 246.0,
                "function_hash": "260693954617491072049851418410466162655"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_trace.c",
                "function": "nft_trace_init"
            },
            "id": "CVE-2022-49622-a3fe8d25",
            "digest": {
                "length": 251.0,
                "function_hash": "330482719423693018478356319583688017884"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "net/netfilter/nf_tables_trace.c"
            },
            "id": "CVE-2022-49622-a7f8ccc5",
            "digest": {
                "line_hashes": [
                    "112573555139394341497496207643559392122",
                    "265018912672193395106970308952311978852",
                    "266951602148770075296920863563431912544",
                    "174437108363517973859093196803565065672",
                    "17677002644239492613511571206489099110",
                    "138107863240210609169325082741362259925",
                    "124503076535032389901032250867481441214",
                    "34698789541638229716428422901493529634",
                    "331332738799357948562261678428023775000",
                    "276826460583371861633963282342491336359",
                    "175664592867271560833418350094017011594",
                    "204341131149065529181549010560798703288",
                    "145374939959010136076424949908473977717",
                    "101386063591314308870872699336182957622",
                    "68770076623121180900584736020398953379",
                    "267375781911331498147565612728845830807",
                    "67402557639863747572015807255895892538",
                    "140355612406939506687515504277035561965",
                    "87858885598674333154149937079569089489",
                    "165732936879055949359753626198748151746",
                    "45265009341918954828213574831855596116",
                    "33419016807162284601185579804903038670",
                    "4008867844914369143196094787050148884",
                    "234986327914479601709647457761381466352",
                    "290887436104906707356646474987089784171",
                    "27104795994654543112660781693195216953",
                    "121969753021042877103581038353661166792",
                    "151599107193761269424004443101411981003",
                    "29390823275584317218944417107030465906",
                    "123353503012982767612913034618283678006",
                    "55131440927415274675617751215539317879",
                    "258546113887812335904528052859572131171",
                    "228815672884959773405432403592208719057",
                    "211269168317580140792427002859677601429",
                    "12635470102639118176488967450408437545",
                    "244623440397478328830319720785446064363",
                    "150339330293163503707154501204872381213",
                    "27736187645930695006544991992042287454",
                    "160032143339765378266566031260607997739",
                    "32052844614438474760601650518674840463",
                    "254767618210901140325905158201504012759",
                    "170050129539913281595505152867018255036"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "net/netfilter/nf_tables_core.c"
            },
            "id": "CVE-2022-49622-bcc367c2",
            "digest": {
                "line_hashes": [
                    "32806092703404758483965756521800882649",
                    "260698652475501382684759315798531755620",
                    "294555209443196156520796894328301697310",
                    "67639628731641480778203134258453790289",
                    "320087673500643029714244478067117181866",
                    "168194400176864880639671762167593745933",
                    "165328386161619603716715296629591833703",
                    "189104234499585682790267922995868078654",
                    "270451213015291951255486753501034006626",
                    "229961065602964675245193658159508967032",
                    "81273795513494881375291264235746378517",
                    "55094196363542917302401432735874600768",
                    "117113930887454860928512290186484602020",
                    "46996468251123633801357573371854511615",
                    "227728038524494311098461850943359987381",
                    "68941321321663807187290636122673628069",
                    "225196333380054918580511700844625462912",
                    "28498120536529437713815178693239141291",
                    "317355023993589560315082541678532110427",
                    "154460556756945023019382914666338313923",
                    "185397923448994712102288621940256555944",
                    "188046381736330780996061052948756248888",
                    "216395038589649220358093645214771235788",
                    "65567061381397010610671765809513087854",
                    "39854772893343308684456954500758379911",
                    "310156560240515062752050667798583513303",
                    "6874233498191789047083140067338474496"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_core.c",
                "function": "__nft_trace_packet"
            },
            "id": "CVE-2022-49622-c8975109",
            "digest": {
                "length": 246.0,
                "function_hash": "260693954617491072049851418410466162655"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_trace.c",
                "function": "trace_fill_id"
            },
            "id": "CVE-2022-49622-c9544b27",
            "digest": {
                "length": 211.0,
                "function_hash": "292207718724879769341015083815186861817"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e34b9ed96ce3b06c79bf884009b16961ca478f87"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_trace.c",
                "function": "trace_fill_id"
            },
            "id": "CVE-2022-49622-f9dae7d3",
            "digest": {
                "length": 211.0,
                "function_hash": "292207718724879769341015083815186861817"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "net/netfilter/nf_tables_trace.c",
                "function": "nft_trace_notify"
            },
            "id": "CVE-2022-49622-fd1a52b5",
            "digest": {
                "length": 2562.0,
                "function_hash": "119681140788185333669753154498851536395"
            },
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0016d5d46d7440729a3132f61a8da3bf7f84e2ba"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.18.13