In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlinkosf: fix possible bogus match in nfosf_find()
nfosffind() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48654.json",
"cna_assigner": "Linux"
}