nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 11, 2022 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-preemptUpgrade kernel-azureUpgrade kernel-preempt-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-preemptUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-develUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-develUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-azureUpgrade kernel-preempt-extraUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-zteUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-preempt-livepatch-develUpgrade dtb-alUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-livepatch-5_3_18-150300_59_43-defaultUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azure | Jan 26, 2022 | Jan 11, 2022 |
| Ubuntu | — | Upgrade linux-azure-5.11Upgrade linux-oem-5.10Upgrade linux-aws-5.11Upgrade linux-oracle-5.11Upgrade linux-gcp-5.11Upgrade linux-riscv-5.11 | Nov 19, 2024 | Jan 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jan 11, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub