What’s Vulnerable › Vulnerabilities

CVE-2022-39190

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-02 · updated 2026-10-14

Description

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain.

Affected products

• Debian Linux: 10.0
• Linux kernel: before 5.19.6 — fixed in 5.19.6

How to fix

Upgrade to a fixed version: Linux kernel 5.19.6. Check the vendor advisory for mitigations.

References

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6
• https://github.com/torvalds/linux/commit/e02f0d3970404bfea385b6edb86f2d936db0ea2b
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
• https://lore.kernel.org/all/20220824220330.64283-12-pablo%40netfilter.org/
• https://twitter.com/pr0Ln
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6
• https://github.com/torvalds/linux/commit/e02f0d3970404bfea385b6edb86f2d936db0ea2b
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
• https://lore.kernel.org/all/20220824220330.64283-12-pablo%40netfilter.org/
• https://twitter.com/pr0Ln
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html
• https://cert-portal.siemens.com/productcert/html/ssa-831302.html

Get alerted when CVE-2022-39190 or the next vulnerability affects your stack