Description
An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain.
Affected products
linux: linux kernel; debian: debian linux
References10
- cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6 PatchRelease NotesVendor Advisory
- cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6 PatchRelease NotesVendor Advisory
- github.com/torvalds/linux/commit/e02f0d3970404bfea385b6edb86f2d… PatchThird Party Advisory
- github.com/torvalds/linux/commit/e02f0d3970404bfea385b6edb86f2d… PatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/11/msg00001.html Mailing ListThird Party Advisory
- lore.kernel.org/all/20220824220330.64283-12-pablo%40netfilter.o…
- twitter.com/pr0Ln Third Party Advisory
- lists.debian.org/debian-lts-announce/2022/11/msg00001.html Mailing ListThird Party Advisory
- lore.kernel.org/all/20220824220330.64283-12-pablo%40netfilter.o…
- twitter.com/pr0Ln Third Party Advisory
Metrics
- CVSS 3.1
-
5.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 0% percentile: 26 · as of 6 November 2026
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.