CVE-2022-36946

一、漏洞信息
漏洞编号：CVE-2022-36946
漏洞归属组件：kernel
漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0
CVSS V3.0分值：
BaseScore：7.5 High
Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞简述：
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
漏洞公开时间：2022-07-28 04:15:00
漏洞创建时间：2022-07-28 09:25:26
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2022-36946

更多参考(点击展开)

参考来源	参考链接	来源链接
nvd	https://marc.info/?l=netfilter-devel&m=165883202007292&w=2
nvd	https://www.debian.org/security/2022/dsa-5207
nvd	https://security.netapp.com/advisory/ntap-20220901-0007/
nvd	https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
nvd	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
redhat	https://access.redhat.com/security/cve/CVE-2022-36946
suse_bugzilla	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-36946	https://bugzilla.suse.com/show_bug.cgi?id=1201940
suse_bugzilla	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946	https://bugzilla.suse.com/show_bug.cgi?id=1201940
suse_bugzilla	https://marc.info/?l=netfilter-devel&m=165883202007292&w=2	https://bugzilla.suse.com/show_bug.cgi?id=1201940
redhat_bugzilla	https://lore.kernel.org/all/20220726104206.2036-1-fw@strlen.de/t/	https://bugzilla.redhat.com/show_bug.cgi?id=2115278
redhat_bugzilla	https://access.redhat.com/errata/RHSA-2022:7444	https://bugzilla.redhat.com/show_bug.cgi?id=2115278
redhat_bugzilla	https://access.redhat.com/errata/RHSA-2022:7683	https://bugzilla.redhat.com/show_bug.cgi?id=2115278
redhat_bugzilla	https://access.redhat.com/errata/RHSA-2022:7933	https://bugzilla.redhat.com/show_bug.cgi?id=2115278
redhat_bugzilla	https://access.redhat.com/errata/RHSA-2022:8267	https://bugzilla.redhat.com/show_bug.cgi?id=2115278
redhat_bugzilla	https://access.redhat.com/security/cve/cve-2022-36946	https://bugzilla.redhat.com/show_bug.cgi?id=2115278
ubuntu	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://marc.info/?l=netfilter-devel&m=165883202007292&w=2	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5580-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5590-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5621-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5622-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5623-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5624-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5630-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5633-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5634-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5635-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5639-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5640-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5644-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5647-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5648-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5650-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5652-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5654-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5655-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5660-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://ubuntu.com/security/notices/USN-5683-1	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://nvd.nist.gov/vuln/detail/CVE-2022-36946	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://launchpad.net/bugs/cve/CVE-2022-36946	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://security-tracker.debian.org/tracker/CVE-2022-36946	https://ubuntu.com/security/CVE-2022-36946
ubuntu	https://bugzilla.redhat.com/show_bug.cgi?id=2115278	https://ubuntu.com/security/CVE-2022-36946
debian		https://security-tracker.debian.org/tracker/CVE-2022-36946
oracle		https://www.oracle.com/security-alerts/ovmbulletinoct2022.html
anolis		https://anas.openanolis.cn/cves/detail/CVE-2022-36946
cve_search		https://marc.info/?l=netfilter-devel&m=165883202007292&w=2
cve_search		https://www.debian.org/security/2022/dsa-5207
cve_search		https://security.netapp.com/advisory/ntap-20220901-0007/
mageia		http://advisories.mageia.org/MGASA-2022-0278.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2257.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2264.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2284.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2285.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2286.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2287.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2288.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2289.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2304.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2343.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2344.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2345.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2816.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2817.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-2819.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
amazon_linux	https://alas.aws.amazon.com/cve/html/CVE-2022-3037.html	https://alas.aws.amazon.com/ALAS-2022-1639.html
suse_bugzilla	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-36946
suse_bugzilla	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946
suse_bugzilla	https://marc.info/?l=netfilter-devel&m=165883202007292&w=2
redhat_bugzilla	https://lore.kernel.org/all/20220726104206.2036-1-fw@strlen.de/t/
redhat_bugzilla	https://bugzilla.redhat.com/show_bug.cgi?id=2115278
ubuntu	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36946
ubuntu	https://marc.info/?l=netfilter-devel&m=165883202007292&w=2
ubuntu	https://ubuntu.com/security/notices/USN-5580-1
ubuntu	https://ubuntu.com/security/notices/USN-5590-1
ubuntu	https://nvd.nist.gov/vuln/detail/CVE-2022-36946
ubuntu	https://launchpad.net/bugs/cve/CVE-2022-36946
ubuntu	https://security-tracker.debian.org/tracker/CVE-2022-36946
ubuntu	https://bugzilla.redhat.com/show_bug.cgi?id=2115278
debian	https://security-tracker.debian.org/tracker/CVE-2022-36946
anolis	https://anas.openanolis.cn/cves/detail/CVE-2022-36946
nvd	https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
nvd	https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
nvd	https://www.debian.org/security/2022/dsa-5207
nvd	https://security.netapp.com/advisory/ntap-20220901-0007/

漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：

详情(点击展开)

影响的包	修复版本	修复补丁	问题引入补丁	来源
linux_kernel	4.14.291	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=83636c64b796a7e44fa72f371777f803c1ef9e74	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb	linuxkernelcves
linux_kernel	4.19.255	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f295d365b30626f82423a923695274024016380e	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb	linuxkernelcves
linux_kernel	4.9.326	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=3b3e2de462323d5fdeb85a3682334a4a3dd07400	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb	linuxkernelcves
linux_kernel	5.10.135	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=440dccd80f627e0e11ceb0429e4cdab61857d17e	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb	linuxkernelcves
linux_kernel	5.15.59	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=91c11008aab0282957b8b8ccb0707d90e74cc3b9	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb	linuxkernelcves
linux_kernel	5.18.16	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=883c20911d6261fc651820b63a77327b8c020264	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb	linuxkernelcves
linux_kernel	5.19	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=99a63d36cb3ed5ca3aa6fcb64cffbeaf3b0fb164	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb	linuxkernelcves
linux_kernel	5.4.209	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=52be29e8b6455788a4d0f501bd87aa679ca3ba3c	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7af4cc3fa158ff1dda6e7451c7e6afa6b0bb85cb	linuxkernelcves

二、漏洞分析结构反馈
影响性分析说明：
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
openEuler评分：
6.2
Vector：CVSS：3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
受影响版本排查(受影响/不受影响)：
1.openEuler-22.03-LTS:受影响
2.openEuler-20.03-LTS-SP1(4.19.90):受影响
3.openEuler-20.03-LTS-SP3(4.19.90):受影响

修复是否涉及abi变化(是/否)：
1.openEuler-22.03-LTS:否
2.openEuler-20.03-LTS-SP1(4.19.90):否
3.openEuler-20.03-LTS-SP3(4.19.90):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2022-1824

@xiexiuqi ,@yangyingliang ,@gatieme ,@jiaoff ,@guohaocs2c ,@hanjun-guo ,@woqidaideshi ,@zhengzengkai ,@newbeats ,@zhangyi089 ,@colyli ,@thundertown ,@htforge ,@chiqijun ,@lengchao ,@zhujianwei001 ,@kylin-mayukun ,@wangxiongfeng ,@wkfxxx ,@SuperSix173 
**issue处理注意事项:** 
**1. 当前issue受影响的分支提交pr时, 须在pr描述中填写当前issue编号进行关联, 否则无法关闭当前issue;**
**2. 模板内容需要填写完整, 无论是受影响或者不受影响都需要填写完整内容,未引入的分支不需要填写, 否则无法关闭当前issue;**
**3. 以下为模板中需要填写完整的内容, 请复制到评论区回复, 注: 内容的标题名称(影响性分析说明, openEuler评分, 受影响版本排查(受影响/不受影响), 修复是否涉及abi变化(是/否))不能省略,省略后cve-manager将无法正常解析填写内容.**
************************************************************************
影响性分析说明:

openEuler评分: (评分和向量)

受影响版本排查(受影响/不受影响): 
1.openEuler-20.03-LTS-SP1(4.19.90):
2.openEuler-20.03-LTS-SP3(4.19.194):
3.openEuler-22.03-LTS(5.10.0):

修复是否涉及abi变化(是/否)：
1.openEuler-20.03-LTS-SP1(4.19.90):
2.openEuler-20.03-LTS-SP3(4.19.194):
3.openEuler-22.03-LTS(5.10.0):

-----------------------------------------------------------------------
issue处理具体操作请参考: 
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
pr关联issue具体操作请参考:
https://gitee.com/help/articles/4142

参考网址	关联pr	状态	补丁链接
https://ubuntu.com/security/CVE-2022-36946
https://nvd.nist.gov/vuln/detail/CVE-2022-36946
https://security-tracker.debian.org/tracker/CVE-2022-36946
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-36946

说明：抱歉，当前工具暂未找到推荐补丁，请人工查找或者之后评论'/find-patch'尝试再次查找。
若人工查找到补丁，烦请在此issue下评论 '/report-patch 参考网址补丁链接1,补丁链接2' 便于我们不断优化工具，不胜感激。
如 /report-patch https://security-tracker.debian.org/tracker/CVE-2021-3997 https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1

CVE-2022-36946
I5J9R4

影响性分析说明：
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.

openEuler评分:(评分和向量)
7.5
CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

受影响版本排查(受影响/不受影响):
1.openEuler-22.03-LTS(5.10.0):受影响
2.openEuler-20.03-LTS-SP1(4.19.90):受影响
3.openEuler-20.03-LTS-SP3(4.19.194):受影响

修复是否涉及abi变化(是/否)：
1.openEuler-22.03-LTS(5.10.0):否
2.openEuler-20.03-LTS-SP1(4.19.90):否
3.openEuler-20.03-LTS-SP3(4.19.194):否

openEuler评分：
6.2
Vector：CVSS：CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

/approve

src-openEuler/kernel

内容风险标识

评论 (11)

src-openEuler/kernel .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2022-36946

评论 (11)

搜索帮助

src-openEuler/kernel