CVE-2025-22110
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
In the Linux kernel, the netfilter nfnetlink_queue subsystem uses an uninitialized 'ctx' variable in nfqnl_build_packet_message(), potentially causing memory allocation errors.
Risk Assessment
The organization may face instability or errors in firewall (netfilter) operation, affecting network traffic filtering.
Recommendation
Update the Linux kernel to a version that initializes the 'ctx' variable to a safe value.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error It is possible that ctx in nfqnl_build_packet_message() could be used before it is properly initialize, which is only initialized by nfqnl_get_sk_secctx(). This patch corrects this problem by initializing the lsmctx to a safe value when it is declared. This is similar to the commit 35fcac7a7c25 ("audit: Initialize lsmctx to avoid memory allocation error").