CVE-2022-48639 — net: sched: fix possible refcount leak in tc_new_tfilter()

Back Back to CVE browser

MEDIUM

net: sched: fix possible refcount leak in tc_new_tfilter()

Published Apr 28, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.23%

Description

tfilter_put need to be called to put the refount got by tp->ops->get to avoid possible refcount leak when chain->tmplt_ops != NULL and chain->tmplt_ops != tp->ops.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.1
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.1
- Version
  5.10.146
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.71
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.19.12
  Status
  unaffected
  Constraints
  <=5.19.*
- Version
  5.4.215
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.0
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.1	affected	-
0	unaffected	<5.1
5.10.146	unaffected	<=5.10.*
5.15.71	unaffected	<=5.15.*
5.19.12	unaffected	<=5.19.*
5.4.215	unaffected	<=5.4.*
6.0	unaffected	<=*

Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 8

kernel

Affected
Red Hat Enterprise Linux 8

kernel-rt

Affected
Red Hat Enterprise Linux 9

kernel

Affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Affected	n/a
Red Hat Enterprise Linux 9	kernel	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.23% 0.00232

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00232

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.23% (0.00232)	12.74th	v5 (v2026.06.15)
Jun 15, 2026	0.23% (0.00232)	13.82th	v5 (v2026.06.15)
Mar 17, 2025	0.06% (0.00062)	16.71th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00045)	17.70th	v3 (v2023.03.01)
Apr 29, 2024	0.04% (0.00045)	14.19th	v3 (v2023.03.01)

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (10)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48639		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2277828		Issue Tracking
https://git.kernel.org/stable/c/0559d91ee3a2cd81b15ad5cd507539d6da867f88		Patch
https://git.kernel.org/stable/c/8844c750eeb03452e2b3319c27a526f447b82596		Patch
https://git.kernel.org/stable/c/903f7d322c17d8e306d766404b4604e81653902a		Patch
https://git.kernel.org/stable/c/c2e1cfefcac35e0eea229e148c8284088ce437b5		Patch
https://git.kernel.org/stable/c/f8162aed962be8fa07445b2b5928e84ab40dd8d7		Patch
https://lore.kernel.org/linux-cve-announce/2024042855-CVE-2022-48639-be80@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48639
https://www.cve.org/CVERecord?id=CVE-2022-48639