GSD-2022-1006530
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit 633c81c0449663f57d4138326d036dc6cfad674e, it was introduced in version v5.2 by commit 22c7652cdaa8cd33ce78bacceb4e826a3f795873. For more details please see the references link.
What each source reports
OSV No score
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit 633c81c0449663f57d4138326d036dc6cfad674e, it was introduced in version v5.2 by commit 22c7652cdaa8cd33ce78bacceb4e826a3f795873. For more details please see the references link.
- Record
GSD-2022-1006530- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
KernelLinux |
Listed versions, plus commit ranges v5.1v5.1-rc4v5.1-rc5v5.1-rc6v5.1-rc7 Show 45 moreShow lessv5.10v5.10-rc1v5.10-rc2v5.10-rc3v5.10-rc4v5.10-rc5v5.10-rc6v5.10-rc7v5.11v5.11-rc1v5.11-rc2v5.11-rc3v5.11-rc4v5.11-rc5v5.11-rc6v5.11-rc7v5.12v5.12-rc1-dontusev5.12-rc2v5.12-rc3v5.12-rc4v5.12-rc5v5.12-rc6v5.12-rc7v5.12-rc8v5.13v5.13-rc1v5.13-rc2v5.13-rc3v5.13-rc4v5.13-rc5v5.13-rc6v5.13-rc7v5.14v5.14-rc1v5.14-rc2v5.14-rc3v5.14-rc4v5.14-rc5v5.14-rc6v5.14-rc7v5.15v5.15-rc1v5.15-rc2v5.15-rc3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GSD-2022-1006530 is a vulnerability with no CVSS score yet in Kernel, published October 9, 2022. No source lists public exploit code. No source names a fixed version.
Left out here: 117 versions. The JSON record has them.