nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 11, 2022 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade dlm-kmp-preemptUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-preempt-optionalUpgrade kernel-azureUpgrade kernel-sourceUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-64kbUpgrade kernel-preemptUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade kernel-defaultUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-5_3_18-150300_59_43-defaultUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade dtb-alUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade dtb-zteUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-preempt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-preemptUpgrade kernel-syms-azureUpgrade cluster-md-kmp-preemptUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azure | Jan 26, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade linux-riscv-5.11Upgrade linux-gcp-5.11Upgrade linux-aws-5.11Upgrade linux-azure-5.11Upgrade linux-oem-5.10Upgrade linux-oracle-5.11 | Nov 19, 2024 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub