https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:26:37 +0000 https://cve.radiocsirt.org/vuln/cve-2022-50212 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nf_tables: do not allow CHAIN_ID to refer to another table</p> <p>When doing lookups for chains on the same batch by using its ID, a chain from a different table can be used. If a rule is added to a table but refers to a chain in a different table, it will be linked to the chain in table2, but would have expressions referring to objects in table1.</p> <p>Then, when table1 is removed, the rule will not be removed as its linked to a chain in table2. When expressions in the rule are processed or removed, that will lead to a use-after-free.</p> <p>When looking for chains by ID, use the table that was used for the lookup by name, and only return chains belonging to that same table.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nf_tables: do not allow CHAIN_ID to refer to another table</p> <p>When doing lookups for chains on the same batch by using its ID, a chain from a different table can be used. If a rule is added to a table but refers to a chain in a different table, it will be linked to the chain in table2, but would have expressions referring to objects in table1.</p> <p>Then, when table1 is removed, the rule will not be removed as its linked to a chain in table2. When expressions in the rule are processed or removed, that will lead to a use-after-free.</p> <p>When looking for chains by ID, use the table that was used for the lookup by name, and only return chains belonging to that same table.</p> https://cve.radiocsirt.org/vuln/cve-2022-50212