CVE-2022-36946
HIGHLinux Kernel 2.6.14-5.18.14 - Denial of Service via Negative skb->len in nfqnl_mangle
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-36946. PoCs published by Pwnzer0tt1, Satheesh575555.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2022-36946, a kernel panic vulnerability in the Linux netfilter module triggered by sending an nf_queue verdict with a 0-byte nfta_payload attribute. The exploit includes multiple variants (root, rootless, and Podman) and leverages user namespaces to achieve privilege escalation without root access.
Description
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.
Exploits (3)
This repository contains functional exploit code for CVE-2022-36946, a kernel panic vulnerability in the Linux netfilter module triggered by sending an nf_queue verdict with a 0-byte nfta_payload attribute. The exploit includes multiple variants (root, rootless, and Podman) and leverages user namespaces to achieve privilege escalation without root access.
The repository contains only documentation files and build scripts from the Linux kernel, with no actual exploit code or technical analysis related to CVE-2022-36946. It appears to be a partial or mislabeled kernel source dump.
The repository contains only documentation files and build scripts from a Linux kernel tree, with no actual exploit code or technical analysis related to CVE-2022-36946.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H