CVE-2022-36946

CVE-2022-36946 Reported-by: Domingo Dirutigliano and Nicola Guerrera While we were working on firegex, our application firewall for CTF Attack-Defence competitions, we stumbled upon a few kernel panics. This strange behavour was than isolated and anlayzed, leading to the discovery of this potenti...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Rejects the immediate NFQUEUE verdict. The nftqueue is always used by the user-space nftables to deliver the NFQUEUE verdict. Immediate emission of the NFQUEUE verdict is never used by the user-space nft tool...

CVE-2026-72255

A flaw was found in the Linux kernel's netfilter component, specifically within the nfqueue functionality. When a bridged packet is queued to NFQUEUE, it can retain a reference to a bridge's private fake destination 'dst' even after the bridge teardown has begun. This can lead to a use-after-free...

CVE-2026-72255

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: pin bridge device while NFQUEUE holds fake dst The brnetfilter fake rtable is embedded in struct netbridge and is attached to bridged packets with skbdstsetnoref. If such a packet is queued to NFQUEUE, nfqueue...

CVE-2026-72255

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: pin bridge device while NFQUEUE holds fake dst The brnetfilter fake rtable is embedded in struct netbridge and is attached to bridged packets with skbdstsetnoref. If such a packet is queued to NFQUEUE, nfqueue...

CVE-2026-72255

The CVE affects the Linux kernel, specifically netfilter nf_queue interactions with bridged traffic. A br_netfilter fake rtable is embedded in struct net_bridge and attached to bridged packets via skb_dst_set_noref. When such a packet is queued to NFQUEUE, __nf_queue() upgrades the fake dst with ...

Linux Distros Unpatched Vulnerability : CVE-2026-72255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfqueue: pin bridge device while NFQUEUE holds fake dst The brnetfilter fake rtable is embedded in struct netbridge and is attached to bridged packet...

The vulnerability of the structnf_queue_entry() function in the include/net/netfilter/nf_queue.h module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the structnfqueueentry function in the include/net/netfilter/nfqueue.h module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

Linux Distros Unpatched Vulnerability : CVE-2026-43024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: reject immediate NFQUEUE verdict nftqueue is always used from userspace nftables to deliver the NFQUEUE verdict. Immediately emitting an...

CVE-2026-43024 netfilter: nf_tables: reject immediate NF_QUEUE verdict

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject immediate NFQUEUE verdict nftqueue is always used from userspace nftables to deliver the NFQUEUE verdict. Immediately emitting an NFQUEUE verdict is never used by the userspace nft tools, so reject...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988912)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988912 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: fix possible use-after-free Eric Dumazet says: The sockhold side seems suspec...

SUSE CVE-2022-48911

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: fix possible use-after-free Eric Dumazet says: The sockhold side seems suspect, because there is no guarantee that skrefcnt is not already 0. On failure, we cannot queue the packet and need to indicate an erro...

CVE-2022-48911

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: fix possible use-after-free Eric Dumazet says: The sockhold side seems suspect, because there is no guarantee that skrefcnt is not already 0. On failure, we cannot queue the packet and need to indicate an erro...

CVE-2022-48911

CVE-2022-48911 is a Linux kernel vulnerability in netfilter nf_queue: a use-after-free risk related to sock_hold() and possibly an already-zero sk_refcnt. If the check fails, the packet cannot be queued and will be dropped by the caller. Connected advisories confirm a fix was applied in the kerne...

K45164470: Linux kernel vulnerability CVE-2022-36946

Security Advisory Description nfqnlmangle in net/netfilter/nfnetlinkqueue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service panic because, in the case of an nfqueue verdict with a one-byte nftapayload attribute, an skbpull can encounter a negative skb-len...

Denial Of Service (DoS)

linux-aws is vulnerable to denial of service. The vulnerability exists in nfnetlinkqueue.c because, in the case of an nfqueue not properly validate which allows an attacker to crash the application via malicious input...

CVE-2022-36946

nfqnlmangle in net/netfilter/nfnetlinkqueue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service panic because, in the case of an nfqueue verdict with a one-byte nftapayload attribute, an skbpull can encounter a negative skb-len...

GSD-2022-1000940 netfilter: nf_queue: fix possible use-after-free

netfilter: nfqueue: fix possible use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.305 by commit...

GSD-2022-1000920 netfilter: nf_queue: fix possible use-after-free

netfilter: nfqueue: fix possible use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.270 by commit...

GSD-2022-1000899 netfilter: nf_queue: fix possible use-after-free

netfilter: nfqueue: fix possible use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.233 by commit...