NetSight
IP …
high7.5

CVE-2022-36946

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in th…

Impact

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.14 before 4.9.326
from 4.10 before 4.14.291
from 4.15 before 4.19.255
from 4.20 before 5.4.209
from 5.5 before 5.10.135
from 5.11 before 5.15.59
DebianDebian Linux
Versions 10.0, 11.0
NetappActive Iq Unified Manager
All versions
NetappSolidfire \& Hci Management Node
All versions
NetappSolidfire \& Hci Storage Node
All versions
NetappSolidfire Enterprise Sds
All versions
NetappHci Compute Node
All versions

References