DEBIAN-CVE-2022-50048

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: possible module reference underflow in error path dst-ops is set on when nftexprclone fails, but module refcount has not been bumped yet, therefore nftexprdestroy leads to module reference underflow...

CVE-2022-50048

The CVE-2022-50048 vulnerability concerns the Linux kernel netfilter nf_tables component. The issue is a module reference underflow in the error path when nft_expr_clone() fails: dst->ops is set, but the module refcount hasn’t been bumped yet, so nft_expr_destroy() can underflow. Affected area...

CVE-2022-50048 netfilter: nf_tables: possible module reference underflow in error path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: possible module reference underflow in error path dst-ops is set on when nftexprclone fails, but module refcount has not been bumped yet, therefore nftexprdestroy leads to module reference underflow...

CVE-2021-46913 netfilter: nftables: clone set element expression template

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clone set element expression template memcpy breaks when using connlimit in set elements. Use nftexprclone to initialize the connlimit expression list, otherwise connlimit garbage collector crashes when walki...

CVE-2021-46913 netfilter: nftables: clone set element expression template

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clone set element expression template memcpy breaks when using connlimit in set elements. Use nftexprclone to initialize the connlimit expression list, otherwise connlimit garbage collector crashes when walki...