What’s Vulnerable › Vulnerabilities

CVE-2022-48639: net: sched: fix possible refcount leak in tc_new_tfilter()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-28 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tc_new_tfilter() tfilter_put need to be called to put the refount got by tp->ops->get to avoid possible refcount leak when chain->tmplt_ops != NULL and chain->tmplt_ops != tp->ops.

Affected products

• Linux kernel: from 5.1 before 5.4.215; from 5.5 before 5.10.146; from 5.11 before 5.15.71; from 5.16 before 5.19.12; 6.0-rc1, 6.0-rc2, 6.0-rc3, 6.0-rc4, 6.0-rc5, 6.0-rc6 — fixed in 5.10.146, 5.15.71, 5.19.12, 5.4.215

How to fix

Upgrade to a fixed version: Linux kernel 5.10.146, 5.15.71, 5.19.12, 5.4.215. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0559d91ee3a2cd81b15ad5cd507539d6da867f88
• https://git.kernel.org/stable/c/8844c750eeb03452e2b3319c27a526f447b82596
• https://git.kernel.org/stable/c/903f7d322c17d8e306d766404b4604e81653902a
• https://git.kernel.org/stable/c/c2e1cfefcac35e0eea229e148c8284088ce437b5
• https://git.kernel.org/stable/c/f8162aed962be8fa07445b2b5928e84ab40dd8d7
• https://git.kernel.org/stable/c/0559d91ee3a2cd81b15ad5cd507539d6da867f88
• https://git.kernel.org/stable/c/8844c750eeb03452e2b3319c27a526f447b82596
• https://git.kernel.org/stable/c/903f7d322c17d8e306d766404b4604e81653902a
• https://git.kernel.org/stable/c/c2e1cfefcac35e0eea229e148c8284088ce437b5
• https://git.kernel.org/stable/c/f8162aed962be8fa07445b2b5928e84ab40dd8d7

Get alerted when CVE-2022-48639 or the next vulnerability affects your stack