nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 11, 2022 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade dtb-zteUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade ocfs2-kmp-preemptUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade dtb-alUpgrade dtb-armUpgrade kernel-livepatch-5_3_18-150300_59_43-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-preempt-extraUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-preemptUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-preemptUpgrade dtb-marvellUpgrade dlm-kmp-preemptUpgrade kernel-64kbUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-optionalUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch | Jan 26, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade linux-riscv-5.11Upgrade linux-gcp-5.11Upgrade linux-oem-5.10Upgrade linux-azure-5.11Upgrade linux-aws-5.11Upgrade linux-oracle-5.11 | Nov 19, 2024 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub