CVE-2022-49558: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49558 affects the Linux kernel's netfilter subsystem, specifically the nf_tables component. The vulnerability involves a double hook unregistration issue in the netns path where __nft_release_hooks() is called from pre_netns exit path which unregisters the hooks, and then the NETDEV_UNREGISTER event is triggered which unregisters the hooks again (NVD).

The issue occurs in the netfilter subsystem when __nft_release_hooks() is called from the pre_netns exit path. The function unregisters the hooks, but subsequently, the NETDEV_UNREGISTER event is triggered, causing the hooks to be unregistered a second time. This leads to a warning message in the kernel log indicating a double unregistration attempt (Kernel Commit).

The vulnerability can trigger kernel warnings and potentially lead to system instability. When triggered, it produces warning messages in the kernel log indicating an attempt to unregister hooks that have already been unregistered (Kernel Commit).

The issue has been fixed in the Linux kernel through a patch that modifies the hook unregistration process. The fix involves using kfree_rcu to release hooks in the clean_net path, ensuring that the NETDEV_UNREGISTER path sees unregistered hooks. This prevents the double unregistration issue (Kernel Commit).