CVE-2025-22064
MEDIUMLinux Kernel 6.3.3-6.14.1 Use-After-Free in nf_tables Hook Registration
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't unregister hook when table is dormant When nf_tables_updchain encounters an error, hook registration needs to be rolled back. This should only be done if the hook has been registered, which won't happen when the table is flagged as dormant (inactive). Just move the assignment into the registration block.
References (5)
Core 5
Core References
Scores
CVSS v3
5.5
EPSS
0.0025
EPSS Percentile
16.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (19)
linux/Kernel
6.13.0 - 6.13.11linux
linux/Kernel
6.14.0 - 6.14.2linux
linux/Kernel
6.4.0 - 6.6.87linux
linux/Kernel
6.7.0 - 6.12.23linux
Linux/Linux
< 6.4
Linux/Linux
6.12.23 - 6.12.*
Linux/Linux
6.13.11 - 6.13.*
Linux/Linux
6.14.2 - 6.14.*
Linux/Linux
6.15
Linux/Linux
6.3.3 - 6.4
... and 9 more
Published
Apr 16, 2025
Tracked Since
Feb 18, 2026