CVE-2025-22064

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-22064
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22064.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-22064
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
MINI (1)
OESA (3)
ROOT (1)
SUSE (11)
UBUNTU (1)
Related
SUSE (11)
Published
2025-04-16T14:12:18Z
Modified
2026-10-20T10:30:33Z
Summary
netfilter: nf_tables: don't unregister hook when table is dormant
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: don't unregister hook when table is dormant

When nf_tables_updchain encounters an error, hook registration needs to be rolled back.

This should only be done if the hook has been registered, which won't happen when the table is flagged as dormant (inactive).

Just move the assignment into the registration block.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22064.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b9703ed44ffbfba85c103b9de01886a225e14b38
Fixed
6134d1ea1e1408e8e7c8c26545b3b301cbdf1eda
Fixed
feb1fa2a03a27fec7001e93e4223be4120d1784b
Fixed
03d1fb457b696c18fe15661440c4f052b2374e7e
Fixed
ce571eba07d54e3637bf334bc48376fbfa55defe
Fixed
688c15017d5cd5aac882400782e7213d40dc3556
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.3.3
Fixed
6.4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d131ce7a319d3bff68d5a9d5509bb22e4ce33946

Affected versions

v6.*
v6.3.10
v6.3.11
v6.3.12
v6.3.13
v6.3.3
v6.3.4
v6.3.5
v6.3.6
v6.3.7
v6.3.8
v6.3.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22064.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.6.87
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.23
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.11
Type
ECOSYSTEM
Events
Introduced
6.14.0
Fixed
6.14.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22064.json"