nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 11, 2022 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-preempt-extraUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-preemptUpgrade dtb-exynosUpgrade kselftests-kmp-preemptUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-preemptUpgrade kernel-azure-extraUpgrade reiserfs-kmp-preemptUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade dtb-lgUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade dtb-zteUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade cluster-md-kmp-preemptUpgrade dtb-alUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-preempt-livepatch-develUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade ocfs2-kmp-preemptUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-livepatch-5_3_18-150300_59_43-defaultUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade dtb-xilinx | Jan 26, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade linux-gcp-5.11Upgrade linux-riscv-5.11Upgrade linux-oracle-5.11Upgrade linux-oem-5.10Upgrade linux-aws-5.11Upgrade linux-azure-5.11 | Nov 19, 2024 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub