CVE:CVE-2022-36946
CNNVD:CNNVD-202207-2560
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.18.14及以前版本存在安全漏洞，该漏洞源于net/netfilter/nfnetlink_queue.c中的nfqnl_mangle允许远程攻击者造成拒绝服务(panic)，因为在nf_queue判决中使用一个字节的nfta_payload属性时，skb_pull可能会遇到一个负的skb->len。。
solution:Upgrade linux linux_kernel to a higher version than 4.9.326,4.14.291,4.19.255,5.4.209,5.10.135,5.15.59,5.18.16,and avoid the version [2.6.14,4.9.326),[4.10,4.14.291),[4.15,4.19.255),[4.20,5.4.209),[5.5,5.10.135),[5.11,5.15.59),[5.16,5.18.16); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_&_hci_storage_node to a higher version than -; Upgrade netapp solidfire_enterprise_sds to a higher version than -; Upgrade netapp hci_compute_node to a higher version than -