Vulnerabilities CVE-2022-48654

CVE-2022-48654

High

Open

TLP:CLEAR

netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.

Details

CVSS Score: 7.1
EPSS Score ⓘ: 0.24%

15.9th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Confidence: 90%
Published: Apr 28, 2024
Last Modified: Aug 5, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.