nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 11, 2022 |
| Suse | — | Upgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-5_3_18-150300_59_43-defaultUpgrade dlm-kmp-azureUpgrade dtb-zteUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade dtb-alUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-obs-buildUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-optionalUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-extraUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dlm-kmp-preemptUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-preemptUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade dtb-altera | Jan 26, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade linux-gcp-5.11Upgrade linux-riscv-5.11Upgrade linux-aws-5.11Upgrade linux-oracle-5.11Upgrade linux-oem-5.10Upgrade linux-azure-5.11 | Nov 19, 2024 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub