Domingo Dirutigliano

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 5.18.14 **Description** The issue is related to the nfnetlink queue module in the Linux kernel, which incorrectly handles verdicts with a one-byte nfta payload attribute. This can allow remote attackers to cause a denial of service (panic) because, in the case of an nf queue verdict, an skb pull can encounter a negative skb->len. **Recommendations** For Linux kernel versions through 5.18.14, update to a version later than 5.18.14 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.