CVE-2022-36946High· 7.5▾ MidnightPoC availablenfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_p…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 41.3 · likelihood 1.8 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
7.7%
7.7% → 8.9%
2 GitHub repos (last check)
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
linux_kernel >= 2.6.14, < 4.9.326linux_kernel >= 4.10, < 4.14.291linux_kernel >= 4.15, < 4.19.255linux_kernel >= 4.20, < 5.4.209linux_kernel >= 5.5, < 5.10.135linux_kernel >= 5.11, < 5.15.59linux_kernel >= 5.16, < 5.18.16debian_linux = 10.0debian_linux = 11.0active_iq_unified_managersolidfire_&_hci_management_nodesolidfire_&_hci_storage_nodesolidfire_enterprise_sdshci_compute_nodeUpgrade past the affected range:
linux_kernel 5.18.16Connected by shared product, vendor, weakness, or advisory.
CVE-2022-36879Medium· 5.5An issue was discovered in the Linux kernel through 5.18.14
CVE-2023-5178High· 8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel
CVE-2023-3338Medium· 6.5A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol
CVE-2022-3649Low· 3.1A vulnerability was found in Linux Kernel
CVE-2024-50602Medium· 5.9An issue was discovered in libexpat before 2.6.4
CVE-2023-32233High· 7.8In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory