Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nfqueue – fixed a possible use-after-free issue. Eric Dumazet says: The sockhold function seems suspicious, as there is no guarantee that skrefcnt is not already 0. In case of failure, we cannot queue the packet and...

CVE-2022-48911

A use-after-free flaw was found in the Linux kernel's NetFilter functionality. This issue could allow a local user to crash the system or escalate their privileges on the system. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat...

CVE-2022-48911

CVE-2022-48911 is a Linux kernel vulnerability in netfilter nf_queue: a use-after-free risk related to sock_hold() and possibly an already-zero sk_refcnt. If the check fails, the packet cannot be queued and will be dropped by the caller. Connected advisories confirm a fix was applied in the kerne...