nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-toolsUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-core | Nov 14, 2022 | Jul 27, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.291-218.527Upgrade kernel-livepatch-4.14.294-220.533Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-livepatch-5.15.59-33.133Upgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-devel | Sep 30, 2022 | Jul 27, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Jul 27, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jul 26, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 9, 2022 | Jul 27, 2022 |
| Debian | — | Upgrade linux | Sep 13, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Nov 3, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Oct 28, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perf | Oct 11, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Nov 15, 2022 | Jul 27, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 2, 2022 | Jul 26, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 9, 2022 | Jul 27, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-modules | Mar 12, 2024 | Jul 27, 2022 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-trace-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade kernel-xen-baseUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-xen-develUpgrade dtb-nvidiaUpgrade kernel-trace-baseUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-ec2Upgrade dtb-appleUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-preemptUpgrade dtb-armUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-ec2-develUpgrade kernel-preempt-optionalUpgrade kernel-kvmsmall-baseUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-extraUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-preempt-livepatch-develUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade dtb-zteUpgrade dtb-lgUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kernel-rt-develUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-traceUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade dtb-amazonUpgrade dtb-alUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade dlm-kmp-preemptUpgrade kernel-xenUpgrade kernel-vanilla-livepatch-develUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade reiserfs-kmp-preemptUpgrade kernel-source-rtUpgrade kernel-vanillaUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-ec2-baseUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-base | Oct 26, 2022 | Jul 27, 2022 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1106-oracleUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-4.15.0-1141-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1136-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-193-genericUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1141-awsUpgrade linux-image-awsUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1127-kvmUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-193-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1020-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1151-azureUpgrade linux-image-5.14.0-1050-oemUpgrade linux-image-5.17.0-1017-oemUpgrade linux-image-aws-hweUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1089-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1091-azure-fdeUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1033-ibmUpgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1075-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-5.4.0-1083-gkeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-193-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1085-awsUpgrade linux-image-5.4.0-1053-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1070-raspiUpgrade linux-image-dell300xUpgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.4.0-1091-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-126-lowlatencyUpgrade linux-image-4.15.0-1119-raspi2Upgrade linux-image-5.4.0-1046-bluefieldUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-4.15.0-1137-snapdragonUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-126-genericUpgrade linux-image-5.4.0-1083-oracleUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-1053-dell300xUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-126-generic-lpaeUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04b | Aug 25, 2022 | Jul 27, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub