nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade python3-perf | Nov 14, 2022 | Jul 27, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-livepatch-5.15.59-33.133Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.291-218.527Upgrade kernel-livepatch-4.14.294-220.533Upgrade python-perf | Sep 30, 2022 | Jul 27, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Jul 27, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Feb 17, 2025 | Jul 26, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 9, 2022 | Jul 27, 2022 |
| Debian | — | Upgrade linux | Sep 13, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 3, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Oct 28, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools | Oct 11, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Oct 11, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Nov 15, 2022 | Jul 27, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 2, 2022 | Jul 26, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 9, 2022 | Jul 27, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-libs | Mar 12, 2024 | Jul 27, 2022 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-vanilla-develUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade ocfs2-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-traceUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade dtb-alUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-source-azureUpgrade kselftests-kmp-preemptUpgrade dtb-exynosUpgrade kernel-ec2-baseUpgrade kernel-rtUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-symsUpgrade kernel-vanilla-livepatch-develUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dlm-kmp-preemptUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-baseUpgrade kernel-vanillaUpgrade dtb-zteUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-xen-baseUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-kvmsmall-baseUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade dlm-kmp-rtUpgrade kernel-xen-develUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-ec2Upgrade kernel-trace-baseUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kernel-ec2-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-armUpgrade kernel-preempt-optionalUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-devel-rtUpgrade gfs2-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-trace-develUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-azure | Oct 26, 2022 | Jul 27, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1091-azureUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-5.4.0-1053-gkeopUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-4.15.0-1053-dell300xUpgrade linux-image-5.4.0-1085-awsUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1070-raspiUpgrade linux-image-5.4.0-1075-kvmUpgrade linux-image-5.4.0-126-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-dell300xUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-4.15.0-1137-snapdragonUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1083-oracleUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-5.4.0-126-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1046-bluefieldUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-126-generic-lpaeUpgrade linux-image-4.15.0-1119-raspi2Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-193-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1083-gkeUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-193-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-193-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1150-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1141-awsUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-4.15.0-1141-aws-hweUpgrade linux-image-5.17.0-1017-oemUpgrade linux-image-4.15.0-1151-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1020-awsUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1106-oracleUpgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.14.0-1050-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1033-ibmUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-gke-5.4Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1089-gcpUpgrade linux-image-5.4.0-1091-azure-fdeUpgrade linux-image-4.15.0-1127-kvmUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1136-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04 | Aug 25, 2022 | Jul 27, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub