CVE-2022-36946High· 7.5▾ MidnightPoC availablenfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_p…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 41.3 · likelihood 1.5 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
7.7%
2 GitHub repos (last check)
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
linux_kernel >= 2.6.14, < 4.9.326linux_kernel >= 4.10, < 4.14.291linux_kernel >= 4.15, < 4.19.255linux_kernel >= 4.20, < 5.4.209linux_kernel >= 5.5, < 5.10.135linux_kernel >= 5.11, < 5.15.59linux_kernel >= 5.16, < 5.18.16debian_linux = 10.0debian_linux = 11.0active_iq_unified_managersolidfire_&_hci_management_nodesolidfire_&_hci_storage_nodesolidfire_enterprise_sdshci_compute_nodeUpgrade past the affected range:
linux_kernel 5.18.16Connected by shared product, vendor, weakness, or advisory.
CVE-2022-36879Medium· 5.5An issue was discovered in the Linux kernel through 5.18.14
CVE-2023-5178High· 8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel
CVE-2023-3338Medium· 6.5A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol
CVE-2022-3649Low· 3.1A vulnerability was found in Linux Kernel
CVE-2023-3141High· 7.1A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel
CVE-2022-43945High· 7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow