SECUFOCUSNOW
Home›CVE index›CVE-2022-50780
Review reviewHigh

CVE-2022-50780

Linux

In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed When the ops_init() interface is invoked to initialize the net, but ops->init() fails, data is released. However, the ptr pointer in net->gen is invalid. In this case, when nfqnl_nf_hook_drop() is invoked to release the net, invalid address access occurs. The process is as follows: setup_net() ops_init() data = kzalloc(...) ---> alloc "data" net_assign_generic() ---> assign "date" to ptr in net->gen ... ops->init() ---> failed ... kfree(data); ---> ptr in net...

CVSS
7.8
EPSS
0.14%
3.81% percentile
CISA KEV
Not listed
Published
2025.12.24
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.14%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed When the ops_init() interface is invoked to initialize the net, but ops->init() fails, data is released. However, the ptr pointer in net->gen is invalid. In this case, when nfqnl_nf_hook_drop() is invoked to release the net, invalid address access occurs. The process is as follows: setup_net() ops_init() data = kzalloc(...) ---> alloc "data" net_assign_generic() ---> assign "date" to ptr in net->gen ... ops->init() ---> failed ... kfree(data); ---> ptr in net...

Affected product and versions

Product
Linux
Affected versions
>= f875bae065334907796da12523f9df85c89f5712 < 5a2ea549be94924364f6911227d99be86e8cf34a, >= f875bae065334907796da12523f9df85c89f5712 < 97ad240fd9aa9214497d14af2b91608e20856cac, >= f875bae065334907796da12523f9df85c89f5712 < c3edc6e808209aa705185f732e682a370981ced1, >= f875bae065334907796da12523f9df85c89f5712 < a1e18acb0246bfb001b08b8b1b830b5ec92a0f13, >= f875bae065334907796da12523f9df85c89f5712 < 4a4df5e78712de39d6f90d6a64b5eb48dca03bd5, >= f875bae065334907796da12523f9df85c89f5712 < d266935ac43d57586e311a087510fe6a084af742, >= 2.6.33
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2022-50780 — Linux | SECUFOCUS NOW