Lucene search

K
f5F5F5:K45164470
HistoryAug 12, 2022 - 12:00 a.m.

K45164470 : Linux kernel vulnerability CVE-2022-36946

2022-08-1200:00:00
my.f5.com
49
linux kernel
vulnerability
denial of service
remote attackers
nf_queue verdict

AI Score

7.3

Confidence

High

EPSS

0.009

Percentile

82.8%

Security Advisory Description

nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len. (CVE-2022-36946)

Impact

There is no impact; F5 products are not affected by this vulnerability.