Tracker / CVE-2022-36946
CVE-2022-36946
High 7.5
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
Affected products and versions
| debian | debian_linux |
|---|---|
| linux | linux_kernel · 2.6.14 → 4.9.326 |
| linux | linux_kernel · 4.10 → 4.14.291 |
| linux | linux_kernel · 4.15 → 4.19.255 |
| linux | linux_kernel · 4.20 → 5.4.209 |
| linux | linux_kernel · 5.11 → 5.15.59 |
| linux | linux_kernel · 5.16 → 5.18.16 |
| linux | linux_kernel · 5.5 → 5.10.135 |
| netapp | active_iq_unified_manager |
| netapp | hci_compute_node |
| netapp | solidfire_\&_hci_management_node |
| netapp | solidfire_\&_hci_storage_node |
| netapp | solidfire_enterprise_sds |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.