CVE-2022-36946

Summary

CVE	CVE-2022-36946
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-07-27 20:15:08 UTC
Updated	2026-10-14 18:17:03 UTC
Description	nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.

Risk And Classification

Primary CVSS: v3.1 7.5 HIGH from [email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Problem Types: NVD-CWE-noinfo | n/a | CWE-noinfo Not enough information

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	ADP	DECLARED	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified
ADP	Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem	affected V1.1 custom	Not specified
ADP	Siemens	SINAMICS PERFECT HARMONY GH180	affected * custom	Not specified

References

Reference	Source	Link	Tags
'[PATCH nf] netfilter: nf_queue: do not allow packet truncation below transport header offset' - MARC	af854a3a-2127-422b-91ae-364da2661108	marc.info	Mailing List, Patch, Third Party Advisory
Debian -- Security Information -- DSA-5207-1 linux	af854a3a-2127-422b-91ae-364da2661108	www.debian.org	Third Party Advisory
July 2022 Linux Kernel Vulnerabilities in NetApp Products \| NetApp Product Security	af854a3a-2127-422b-91ae-364da2661108	security.netapp.com	Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-942865.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
[SECURITY] [DLA 3102-1] linux-5.10 new package	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org	Mailing List, Third Party Advisory
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org
cert-portal.siemens.com/productcert/html/ssa-419740.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
cert-portal.siemens.com/productcert/html/ssa-794697.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
cert-portal.siemens.com/productcert/html/ssa-561322.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
[SECURITY] [DLA 3131-1] linux security update	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org	Mailing List, Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

160190 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2022-9969)
160210 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-7683)
160270 Oracle Enterprise Linux Security Update for kernel (ELSA-2022-8267)
180938 Debian Security Update for linux (DSA 5207-1)
181002 Debian Security Update for linux-5.10 (DLA 3102-1)
181091 Debian Security Update for linux (DLA 3131-1)
184405 Debian Security Update for linux (CVE-2022-36946)
198915 Ubuntu Security Notification for Linux kernel (OEM) Vulnerability (USN-5590-1)
198946 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5621-1)
198948 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5624-1)
198949 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5622-1)
198950 Ubuntu Security Notification for Linux kernel (HWE) Vulnerabilities (USN-5623-1)
198953 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5633-1)
198954 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5630-1)
198957 Ubuntu Security Notification for Linux kernel (OEM) Vulnerability (USN-5634-1)
198958 Ubuntu Security Notification for Linux kernel (GKE) Vulnerabilities (USN-5635-1)
198960 Ubuntu Security Notification for Linux kernel (Oracle) Vulnerabilities (USN-5640-1)
198962 Ubuntu Security Notification for Linux kernel (Azure CVM) Vulnerabilities (USN-5639-1)
198964 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-5644-1)
198966 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-5647-1)
198967 Ubuntu Security Notification for Linux kernel (GKE) Vulnerabilities (USN-5648-1)
198970 Ubuntu Security Notification for Linux kernel (GKE) Vulnerabilities (USN-5654-1)
198972 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-5655-1)
198974 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-5660-1)
198989 Ubuntu Security Notification for Linux kernel (IBM) Vulnerabilities (USN-5683-1)
240815 Red Hat Update for kernel-rt (RHSA-2022:7444)
240817 Red Hat Update for kernel security (RHSA-2022:7683)
240869 Red Hat Update for kernel-rt (RHSA-2022:7933)
240904 Red Hat Update for kernel security (RHSA-2022:8267)
242890 Red Hat Update for kernel (RHSA-2024:0724)
354049 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-034
354051 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-019
354053 Amazon Linux Security Advisory for kernel : ALAS2-2022-1838
354055 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2022-007
354071 Amazon Linux Security Advisory for kernel : ALAS-2022-1636
354075 Amazon Linux Security Advisory for kernel : ALAS2-2022-1852
354439 Amazon Linux Security Advisory for kernel : ALAS2022-2022-150
354468 Amazon Linux Security Advisory for kernel : ALAS2022-2022-185
354542 Amazon Linux Security Advisory for kernel : ALAS-2022-185
355199 Amazon Linux Security Advisory for kernel : ALAS2023-2023-070
377117 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2022:0158)
377766 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2022:0049)
377871 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2023:0001)
377891 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0002)
6140296 AWS Bottlerocket Security Update for kernel (GHSA-rp47-6345-hgg5)
672141 EulerOS Security Update for kernel (EulerOS-SA-2022-2441)
672205 EulerOS Security Update for kernel (EulerOS-SA-2022-2466)
672218 EulerOS Security Update for kernel (EulerOS-SA-2022-2619)
672278 EulerOS Security Update for kernel (EulerOS-SA-2022-2686)
672286 EulerOS Security Update for kernel (EulerOS-SA-2022-2654)
672354 EulerOS Security Update for kernel (EulerOS-SA-2022-2732)
672391 EulerOS Security Update for kernel (EulerOS-SA-2022-2767)
752452 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2719-1)
752453 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2723-1)
752455 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2720-1)
752463 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2809-1)
752474 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2827-1)
752502 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2875-1)
752591 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3274-1)
752594 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3293-1)
753063 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4617-1)
753156 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2741-1)
753167 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:3288-1)
753259 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 2 for SLE 15 SP4) (SUSE-SU-2022:3123-1)
753298 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (SUSE-SU-2022:3061-1)
753310 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 0 for SLE 15 SP4) (SUSE-SU-2022:3108-1)
753316 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2892-1)
753465 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 1 for SLE 15 SP4) (SUSE-SU-2022:3072-1)
753703 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
753707 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
753727 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0416-1)
902615 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10414)
902654 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10440)
904135 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10440-1)
904204 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10414-1)
905743 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10414-2)
906349 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (10440-2)
940732 AlmaLinux Security Update for kernel (ALSA-2022:7683)
940766 AlmaLinux Security Update for kernel-rt (ALSA-2022:7444)
940798 AlmaLinux Security Update for kernel (ALSA-2022:8267)
940843 AlmaLinux Security Update for kernel-rt (ALSA-2022:7933)
960176 Rocky Linux Security Update for kernel-rt (RLSA-2022:7444)
960184 Rocky Linux Security Update for kernel (RLSA-2022:7683)