Remote Yes

Type Denial of service

Description

nfqnl_mangle in net/netfilter/nfnetlink_queue.c allows remote attackers to cause a denial of service in the case of a nf_queue verdict with a one-byte nfta_payload attribute skb_pull can encounter a negative skb->len

AVG-2837 linux 6.0.12-1 6.1-1 High Unknown

AVG-2836 linux-zen 6.0.12-1 6.1-1 High Unknown

AVG-2835 linux-hardened 6.0.19-1 6.1-1 High Unknown

AVG-2834 linux-lts 5.15.94-1 6.1-1 High Unknown

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=99a63d36cb3ed5ca3aa6fcb64cffbeaf3b0fb164
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb
https://marc.info/?l=netfilter-devel&m=165883202007292&w=2
https://kernel.dance/#CVE-2022-36946