What’s Vulnerable › Vulnerabilities

CVE-2022-49293: netfilter: nf_tables: initialize registers in nft_do_chain()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: initialize registers in nft_do_chain() Initialize registers to avoid stack leak into userspace.

Affected products

• Linux kernel: from 3.13 before 4.9.309; from 4.10 before 4.14.274; from 4.15 before 4.19.237; from 4.20 before 5.4.188; from 5.5 before 5.10.109; from 5.11 before 5.15.32 — fixed in 4.14.274, 4.19.237, 4.9.309, 5.10.109, 5.15.32, 5.16.18

How to fix

Upgrade to a fixed version: Linux kernel 4.14.274, 4.19.237, 4.9.309, 5.10.109. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/06f0ff82c70241a766a811ae1acf07d6e2734dcb
• https://git.kernel.org/stable/c/2c74374c2e88c7b7992bf808d9f9391f7452f9d9
• https://git.kernel.org/stable/c/4c905f6740a365464e91467aa50916555b28213d
• https://git.kernel.org/stable/c/4d28522acd1c4415c85f6b33463713a268f68965
• https://git.kernel.org/stable/c/64f24c76dd0ce53d0fa3a0bfb9aeea507c769485
• https://git.kernel.org/stable/c/88791b79a1eb2ba94e95d039243e28433583a67b
• https://git.kernel.org/stable/c/a3cc32863b175168283cb0a5fde08de6a1e27df9
• https://git.kernel.org/stable/c/dd03640529204ef4b8189fbdea08217d8d98271f
• https://git.kernel.org/stable/c/fafb904156fbb8f1dd34970cd5223e00b47c33be

Get alerted when CVE-2022-49293 or the next vulnerability affects your stack