Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-48641 Details

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/11ebf32fde46572b0aaf3c2bdd97d923ef5a03ab kernel.orgPatch
https://git.kernel.org/stable/c/1e98318af2f163eadaff815abcef38d27ca92c1e kernel.orgPatch
https://git.kernel.org/stable/c/38cf372b17f0a5f35c1b716a100532d539f0eb33 kernel.orgPatch
https://git.kernel.org/stable/c/62ce44c4fff947eebdf10bb582267e686e6835c9 kernel.orgPatch
https://git.kernel.org/stable/c/754e8b74281dd54a324698803483f47cf3355ae1 kernel.orgPatch

see all 14 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-401Missing Release of Memory after Effective Lifetime[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 4.14.292, < 4.14.295
>= 4.19.257, < 4.19.260
>= 5.4.212, < 5.4.215
>= 5.10.140, < 5.10.146
>= 5.15.64, < 5.15.71

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-48641
NVD Published Date:
Apr 28, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2022-48641 Details - Not Deferred