CVE-2022-36946

Published: Jul 27, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.

Affected (14)

Products: Linux: Linux Kernel · Debian: Debian Linux · Netapp: Active Iq Unified Manager, Hci Compute Node, Solidfire & Hci Management Node, Solidfire & Hci Storage Node, Solidfire Enterprise Sds

1 product

1 product

5 products

Active Iq Unified Manager

Hci Compute Node

Solidfire & Hci Management Node

Solidfire & Hci Storage Node

Solidfire Enterprise Sds

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.14 to 4.9.326
Linux Linux Kernel	From 4.10 to 4.14.291
Linux Linux Kernel	From 4.15 to 4.19.255
Linux Linux Kernel	From 4.20 to 5.4.209
Linux Linux Kernel	From 5.11 to 5.15.59
Linux Linux Kernel	From 5.16 to 5.18.16
Linux Linux Kernel	From 5.5 to 5.10.135

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Hci Compute Node	All versions
Netapp Solidfire & Hci Management Node	All versions
Netapp Solidfire & Hci Storage Node	All versions
Netapp Solidfire Enterprise Sds	All versions