CVE-2022-48691

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: clean up hook list when offload flags check fails

splice back the hook list so nft_chain_release_hook() has a chance to

release the hooks.

BUG: memory leak

unreferenced object 0xffff88810180b100 (size 96):

comm "syz-executor133", pid 3619, jiffies 4294945714 (age 12.690s)

hex dump (first 32 bytes):

28 64 23 02 81 88 ff ff 28 64 23 02 81 88 ff ff (d#.....(d#.....

90 a8 aa 83 ff ff ff ff 00 00 b5 0f 81 88 ff ff ................

backtrace:

[<ffffffff83a8c59b>] kmalloc include/linux/slab.h:600 [inline]

[<ffffffff83a8c59b>] nft_netdev_hook_alloc+0x3b/0xc0 net/netfilter/nf_tables_api.c:1901

[<ffffffff83a9239a>] nft_chain_parse_netdev net/netfilter/nf_tables_api.c:1998 [inline]

[<ffffffff83a9239a>] nft_chain_parse_hook+0x33a/0x530 net/netfilter/nf_tables_api.c:2073

[<ffffffff83a9b14b>] nf_tables_addchain.constprop.0+0x10b/0x950 net/netfilter/nf_tables_api.c:2218

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References