CVE-2025-22064
netfilter: nf_tables: don't unregister hook when table is dormant
Summary
netfilter: nf_tables: don't unregister hook when table is dormant
Original description
The description as published by the source.
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: don't unregister hook when table is dormant
When nf_tables_updchain encounters an error, hook registration needs to
be rolled back.
This should only be done if the hook has been registered, which won't
happen when the table is flagged as dormant (inactive).
Just move the assignment into the registration block.
Affected packages
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.0"},{"fixed":"6.6.87"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.23"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.13.11"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.14.0"},{"fixed":"6.14.2"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- BellSoft Alpaquita BELL-CVE-2025-22064 linux-lts Fixed in: 6.12.41-r0
- Debian DEBIAN-CVE-2025-22064 linux Fixed in: 6.12.25-1
- Ubuntu UBUNTU-CVE-2025-22064 linux-hwe-edge
References
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org