CVE-2022-36946

kernel: DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c

Published Jul 27, 2022 CVSS 3.1 · 7.5 High EPSS 8.9% KEV · Not listed
Description
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3102-1 linux-5.10 new package
Debian DLA Debian DLA DLA-3131-1 linux security update
Debian DSA Debian DSA DSA-5207-1 linux security update
Ubuntu USN Ubuntu USN USN-5580-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-5590-1 Linux kernel (OEM) vulnerability
Ubuntu USN Ubuntu USN USN-5621-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5622-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5623-1 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-5624-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5630-1 Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN Ubuntu USN USN-5633-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5634-1 Linux kernel (OEM) vulnerability
Ubuntu USN Ubuntu USN USN-5635-1 Linux kernel (GKE) vulnerabilities
Ubuntu USN Ubuntu USN USN-5639-1 Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5640-1 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-5644-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-5647-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-5648-1 Linux kernel (GKE) vulnerabilities
Ubuntu USN Ubuntu USN USN-5650-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5652-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-5654-1 Linux kernel (GKE) vulnerabilities
Ubuntu USN Ubuntu USN USN-5655-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-5660-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-5683-1 Linux kernel (IBM) vulnerabilities