CVE-2025-22064
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't unregister hook when table is dormant When nf_tables_updchain encounters an error, hook registration needs to be rolled back.
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't unregister hook when table is dormant When nf_tables_updchain encounters an error, hook registration needs to be rolled back. This should only be done if the hook has been registered, which won't happen when the table is flagged as dormant (inactive). Just move the assignment into the registration block.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.27% probability · 18th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/03d1fb457b696c18fe15661440c4f052b2374e7ePatch
- https://git.kernel.org/stable/c/6134d1ea1e1408e8e7c8c26545b3b301cbdf1edaPatch
- https://git.kernel.org/stable/c/688c15017d5cd5aac882400782e7213d40dc3556Patch
- https://git.kernel.org/stable/c/ce571eba07d54e3637bf334bc48376fbfa55defePatch
- https://git.kernel.org/stable/c/feb1fa2a03a27fec7001e93e4223be4120d1784bPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.