CVE-2025-22110
A bug in the Linux kernel’s netfilter nfnetlink_queue subsystem could cause a memory allocation error because a context variable was used before it was initialized. The issue has been fixed by initializing the context safely.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel, any distribution using a kernel version before the patch that initializes nfqnl_build_packet_message() context.
Real-world impact
An attacker could trigger a memory allocation error that may lead to denial of service or, if the error is leveraged, to further exploitation such as privilege escalation or system crash.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability is exploitable remotely with no authentication, can compromise confidentiality, integrity, and availability, and requires no user interaction.
What to do about it
- 01Check the current kernel version.
- 02Install a kernel version that includes the nfnetlink_queue context initialization patch (any kernel released after the fix).
- 03Reboot the system to load the updated kernel.
NVD-referenced vendor advisory
Timeline
- Apr 16, 2025 · Apr 16, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 7d agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.