CVE-2022-39190

medium

Description

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain.

References

Advisories
More

https://twitter.com/pr0Ln

https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html

https://github.com/torvalds/linux/commit/e02f0d3970404bfea385b6edb86f2d936db0ea2b

https://github.com/advisories/GHSA-jr8j-2jhp-m67v

https://lore.kernel.org/all/20220824220330.64283-12-pablo%40netfilter.org/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41735

https://cert-portal.siemens.com/productcert/html/ssa-831302.html

https://cert-portal.siemens.com/productcert/html/ssa-794697.html

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6

Details

Source: Mitre, NVD

Published: 2022-09-02

Updated: 2026-10-14

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H