USN-5590-1: Linux kernel (OEM) vulnerability

Published Aug 30, 2022

Updated

Domingo Dirutigliano and Nicola Guerrera discovered that the netfilter subsystem in the Linux kernel did not properly handle rules that truncated packets below the packet header size. When such rules are in place, a remote attacker could possibly use this to cause a denial of service (system crash).

Affected Software

1 affected component

Canonical Linux kernel (OEM)

Event History

May 10, 2025

Advisory Published

via Ubuntu·03:53 AM

Data Sourced

via Ubuntu·03:53 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-36946

Frequently Asked Questions

What is the vulnerability ID of this Linux kernel (OEM) vulnerability?

The vulnerability ID of this Linux kernel (OEM) vulnerability is USN-5590-1.

What is the severity of USN-5590-1?

The severity of USN-5590-1 is not mentioned in the provided information.

How does the netfilter subsystem handle rules in the Linux kernel?

The netfilter subsystem in the Linux kernel did not properly handle rules that truncated packets below the packet header size.

What is the impact of this vulnerability?

The impact of this vulnerability is a possible denial of service (system crash) when specific rules are in place.

How can I fix USN-5590-1?

To fix USN-5590-1, update the Linux kernel package to version 5.14.0.1050.46 or higher.