CVE-2025-22064

MEDIUM

Linux Kernel 6.3.3-6.14.1 Use-After-Free in nf_tables Hook Registration

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't unregister hook when table is dormant When nf_tables_updchain encounters an error, hook registration needs to be rolled back. This should only be done if the hook has been registered, which won't happen when the table is flagged as dormant (inactive). Just move the assignment into the registration block.

Scores

CVSS v3 5.5
EPSS 0.0025
EPSS Percentile 16.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (19)
linux/Kernel 6.13.0 - 6.13.11linux
linux/Kernel 6.14.0 - 6.14.2linux
linux/Kernel 6.4.0 - 6.6.87linux
linux/Kernel 6.7.0 - 6.12.23linux
Linux/Linux < 6.4
Linux/Linux 6.12.23 - 6.12.*
Linux/Linux 6.13.11 - 6.13.*
Linux/Linux 6.14.2 - 6.14.*
Linux/Linux 6.15
Linux/Linux 6.3.3 - 6.4
... and 9 more
Published Apr 16, 2025
Tracked Since Feb 18, 2026