CVE-2024-50038 netfilter: xtables: avoid NFPROTO_UNSPEC where needed

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cybersecurity Updates on Netfilter Vulnerabilities CVE-2025-22064 and CVE-2024-50038 Two vulnerabilities in the netfilter framework have been reported. CVE-2025-22064, published on April 16, 2025, addresses an issue where the nf_tables hook is unregistered when the table is dormant. CVE-2024-50038, published on October 21, 2024, focuses on avoiding the use of NFPROTO_UNSPEC in xtables where necessary. 2 sources 39