medium 5.5

CVE-2022-39190 json

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6.

published 2022-09-02 4 y ago modified 2026-10-14 25 d ago also EUVD-2022-41735

cvss: 5.5; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 25%
public exploits: 0; none known

An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain.

Patch / fix

fixed in 1 distros 6 links 2

Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem V1.1

debian ubuntu red hat suse almalinux azure linux

linux Debian 14, Debian 13, Debian 12 5.19.6-1

debian advisories DEBIAN-CVE-2022-39190

linux Ubuntu 22.04 LTS 5.15.0-53.59
linux-aws Ubuntu 22.04 LTS 5.15.0-1023.27
linux-gcp Ubuntu 22.04 LTS 5.15.0-1022.29
linux-gke Ubuntu 22.04 LTS 5.15.0-1020.25
linux-ibm Ubuntu 22.04 LTS 5.15.0-1018.21
linux-kvm Ubuntu 22.04 LTS 5.15.0-1021.26
linux-azure Ubuntu 22.04 LTS 5.15.0-1023.29
linux-gkeop Ubuntu 22.04 LTS 5.15.0-1008.12

ubuntu advisories UBUNTU-CVE-2022-39190

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

kernel RHEL 9 5.14.0-162.6.1.el9_1
perf RHEL 9 5.14.0-162.6.1.el9_1
bpftool RHEL 9 5.14.0-162.6.1.el9_1
kernel-core RHEL 9 5.14.0-162.6.1.el9_1
kernel-tools RHEL 9 5.14.0-162.6.1.el9_1
python3-perf RHEL 9 5.14.0-162.6.1.el9_1
kernel-modules RHEL 9 5.14.0-162.6.1.el9_1
kernel-zfcpdump RHEL 9 5.14.0-162.6.1.el9_1

red hat advisories RHSA-2022:8267 RHSA-2022:7933

kernel-rt Real Time Module 15 SP4, openSUSE Leap 15.4 5.14.21-150400.15.5.1
kernel-syms-rt Real Time Module 15 SP4, openSUSE Leap 15.4 5.14.21-150400.15.5.1
kernel-rt_debug Real Time Module 15 SP4, openSUSE Leap 15.4 5.14.21-150400.15.5.1
kernel-source-rt Real Time Module 15 SP4, openSUSE Leap 15.4 5.14.21-150400.15.5.1
kernel-rt SLE Micro 5.2, SLE Micro 5.1, Real Time Module 15 SP3 +1 more 5.3.18-150300.106.1
kernel-syms-rt Real Time Module 15 SP3 5.3.18-150300.106.1
kernel-rt_debug Real Time Module 15 SP3 5.3.18-150300.106.1
kernel-source-rt Real Time Module 15 SP3 5.3.18-150300.106.1

suse advisories SUSE-SU-2022:4617-1 SUSE-SU-2022:3809-1 SUSE-SU-2022:3609-1 SUSE-SU-2022:3293-1 SUSE-SU-2022:3288-1 SUSE-SU-2022:3264-1

kernel-rt AlmaLinux 9 5.14.0-162.6.1.rt21.168.el9_1
kernel-rt-kvm AlmaLinux 9 5.14.0-162.6.1.rt21.168.el9_1
kernel-rt-core AlmaLinux 9 5.14.0-162.6.1.rt21.168.el9_1
kernel-rt-modules AlmaLinux 9 5.14.0-162.6.1.rt21.168.el9_1
kernel-rt-debug-kvm AlmaLinux 9 5.14.0-162.6.1.rt21.168.el9_1
kernel-rt-debug-core AlmaLinux 9 5.14.0-162.6.1.rt21.168.el9_1
kernel-rt-debug-modules AlmaLinux 9 5.14.0-162.6.1.rt21.168.el9_1
kernel-rt-modules-extra AlmaLinux 9 5.14.0-162.6.1.rt21.168.el9_1

almalinux advisories ALSA-2022:7933 ALSA-2022:8267

kernel CBL-Mariner 2.0 5.15.67.1-4

azure linux advisories AZL-10860

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

github.com/torvalds/linux@e02f0d3 commit
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6 advisory

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-39190 updated 2026-11-07 cvss 5.5

kernel: nf_tables disallow binding to already bound chain

Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more
affected: workaround, no fix planned “Out of support scope”
Red Hat CodeReady Linux Builder (v. 9) kernel-debuginfo-common-s390x 5.14.0-162.6.1.el9_1, kernel-debuginfo-common-x86_64 5.14.0-162.6.1.el9_1, kernel-debuginfo-common-aarch64 5.14.0-162.6.1.el9_1, kernel-debuginfo-common-ppc64le 5.14.0-162.6.1.el9_1 Red Hat Enterprise Linux AppStream (v. 9) perf 5.14.0-162.6.1.el9_1, kernel-devel-matched 5.14.0-162.6.1.el9_1, kernel-debug-devel-matched 5.14.0-162.6.1.el9_1, kernel-debuginfo-common-s390x 5.14.0-162.6.1.el9_1, kernel-zfcpdump-devel-matched 5.14.0-162.6.1.el9_1, kernel-debuginfo-common-x86_64 5.14.0-162.6.1.el9_1, +2 more Red Hat Enterprise Linux BaseOS (v. 9) kernel 5.14.0-162.6.1.el9_1, bpftool 5.14.0-162.6.1.el9_1, kernel-core 5.14.0-162.6.1.el9_1, kernel-tools 5.14.0-162.6.1.el9_1, python3-perf 5.14.0-162.6.1.el9_1, kernel-modules 5.14.0-162.6.1.el9_1, +14 more
fixed: vendor fix RHSA-2022:8267
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-core 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-modules 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-debug-core 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-debug-modules 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-modules-extra 5.14.0-162.6.1.rt21.168.el9_1, +2 more Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-kvm 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-core 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-modules 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-debug-kvm 5.14.0-162.6.1.rt21.168.el9_1, kernel-rt-debug-core 5.14.0-162.6.1.rt21.168.el9_1, +4 more
fixed: vendor fix RHSA-2022:7933
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-23-166-10 updated 2024-04-09 cvss 5.5

Siemens SIMATIC S7-1500 TM MFP BIOS

Siemens SIMATIC S7-1500 TM MFP - BIOS <V1.3.0
affected: fixed in V1.3.0, workaround support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-23-166-11 updated 2024-04-09 cvss 5.5

Siemens SIMATIC S7-1500 TM MFP Linux Kernel

Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem <V1.1
affected: fixed in V1.1, workaround support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

0.33% chance of exploitation in the next 30 days, higher than 25% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Classification

Technology feeds

Linux kernel rss critical rss

References

github.com /torvalds/linux/commit/e02f0d3970404bfea385b6edb86f2d936db0ea2b
patch, third-party-advisory
cdn.kernel.org /pub/linux/kernel/v5.x/ChangeLog-5.19.6
patch, release-notes, vendor-advisory
twitter.com /pr0Ln
third-party-advisory
lore.kernel.org /all/20220824220330.64283-12-pablo%40netfilter.org/
lists.debian.org /debian-lts-announce/2022/11/msg00001.html
mailing-list, third-party-advisory
cert-portal.siemens.com /productcert/html/ssa-831302.html
cert-portal.siemens.com /productcert/html/ssa-794697.html

Sources

CVE List CVE-2022-39190
NVD CVE-2022-39190

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary