nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 11, 2022 |
| Suse | — | Upgrade kernel-preempt-optionalUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade kernel-preemptUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-preemptUpgrade kernel-defaultUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade dtb-alteraUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-preempt-extraUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-preemptUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-livepatch-5_3_18-150300_59_43-defaultUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-zteUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-alUpgrade kernel-preempt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-default | Jan 26, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade linux-gcp-5.11Upgrade linux-riscv-5.11Upgrade linux-aws-5.11Upgrade linux-oracle-5.11Upgrade linux-azure-5.11Upgrade linux-oem-5.10 | Nov 19, 2024 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub