Description
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
Exploits (1)
References (3)
Core 3
Core References
Third Party Advisory vendor-advisory
https://www.debian.org/security/2022/dsa-5161
Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2096178
Mailing List, Patch, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85
Scores
CVSS v3
5.5
EPSS
0.0049
EPSS Percentile
65.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-121
CWE-120
Status
published
Products (5)
debian/debian_linux
11.0
linux/linux_kernel
< 5.19
redhat/enterprise_linux
8.0
redhat/enterprise_linux
9.0
redhat/virtualization
4.0
Published
Jun 30, 2022
Tracked Since
Feb 18, 2026