nftablesnewset in net/netfilter/nftablesapi.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nftsetelemexpralloc. A local user can set a netfilter table expression in their own namespace.
{ "binaries": [ { "binary_name": "linux-aws-5.11-cloud-tools-5.11.0-1017", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-aws-5.11-headers-5.11.0-1017", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-aws-5.11-tools-5.11.0-1017", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-buildinfo-5.11.0-1017-aws", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-cloud-tools-5.11.0-1017-aws", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-headers-5.11.0-1017-aws", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-image-5.11.0-1017-aws", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-image-5.11.0-1017-aws-dbgsym", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-modules-5.11.0-1017-aws", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-modules-extra-5.11.0-1017-aws", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-tools-5.11.0-1017-aws", "binary_version": "5.11.0-1017.18~20.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-azure-5.11-cloud-tools-5.11.0-1015", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-azure-5.11-headers-5.11.0-1015", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-azure-5.11-tools-5.11.0-1015", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-buildinfo-5.11.0-1015-azure", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-cloud-tools-5.11.0-1015-azure", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-headers-5.11.0-1015-azure", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-image-unsigned-5.11.0-1015-azure", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-image-unsigned-5.11.0-1015-azure-dbgsym", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-modules-5.11.0-1015-azure", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-modules-extra-5.11.0-1015-azure", "binary_version": "5.11.0-1015.16~20.04.1" }, { "binary_name": "linux-tools-5.11.0-1015-azure", "binary_version": "5.11.0-1015.16~20.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-5.11.0-1018-gcp", "binary_version": "5.11.0-1018.20~20.04.2" }, { "binary_name": "linux-gcp-5.11-headers-5.11.0-1018", "binary_version": "5.11.0-1018.20~20.04.2" }, { "binary_name": "linux-gcp-5.11-tools-5.11.0-1018", "binary_version": "5.11.0-1018.20~20.04.2" }, { "binary_name": "linux-headers-5.11.0-1018-gcp", "binary_version": "5.11.0-1018.20~20.04.2" }, { "binary_name": "linux-image-unsigned-5.11.0-1018-gcp", "binary_version": "5.11.0-1018.20~20.04.2" }, { "binary_name": "linux-image-unsigned-5.11.0-1018-gcp-dbgsym", "binary_version": "5.11.0-1018.20~20.04.2" }, { "binary_name": "linux-modules-5.11.0-1018-gcp", "binary_version": "5.11.0-1018.20~20.04.2" }, { "binary_name": "linux-modules-extra-5.11.0-1018-gcp", "binary_version": "5.11.0-1018.20~20.04.2" }, { "binary_name": "linux-tools-5.11.0-1018-gcp", "binary_version": "5.11.0-1018.20~20.04.2" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-5.10.0-1050-oem", "binary_version": "5.10.0-1050.52" }, { "binary_name": "linux-headers-5.10.0-1050-oem", "binary_version": "5.10.0-1050.52" }, { "binary_name": "linux-image-unsigned-5.10.0-1050-oem", "binary_version": "5.10.0-1050.52" }, { "binary_name": "linux-image-unsigned-5.10.0-1050-oem-dbgsym", "binary_version": "5.10.0-1050.52" }, { "binary_name": "linux-modules-5.10.0-1050-oem", "binary_version": "5.10.0-1050.52" }, { "binary_name": "linux-oem-5.10-headers-5.10.0-1050", "binary_version": "5.10.0-1050.52" }, { "binary_name": "linux-oem-5.10-tools-5.10.0-1050", "binary_version": "5.10.0-1050.52" }, { "binary_name": "linux-oem-5.10-tools-host", "binary_version": "5.10.0-1050.52" }, { "binary_name": "linux-tools-5.10.0-1050-oem", "binary_version": "5.10.0-1050.52" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-5.11.0-1017-oracle", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-headers-5.11.0-1017-oracle", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-image-unsigned-5.11.0-1017-oracle", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-image-unsigned-5.11.0-1017-oracle-dbgsym", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-modules-5.11.0-1017-oracle", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-modules-extra-5.11.0-1017-oracle", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-oracle-5.11-headers-5.11.0-1017", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-oracle-5.11-tools-5.11.0-1017", "binary_version": "5.11.0-1017.18~20.04.1" }, { "binary_name": "linux-tools-5.11.0-1017-oracle", "binary_version": "5.11.0-1017.18~20.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-5.11.0-1018-generic", "binary_version": "5.11.0-1018.19~20.04.2" }, { "binary_name": "linux-headers-5.11.0-1018-generic", "binary_version": "5.11.0-1018.19~20.04.2" }, { "binary_name": "linux-image-5.11.0-1018-generic", "binary_version": "5.11.0-1018.19~20.04.2" }, { "binary_name": "linux-image-5.11.0-1018-generic-dbgsym", "binary_version": "5.11.0-1018.19~20.04.2" }, { "binary_name": "linux-modules-5.11.0-1018-generic", "binary_version": "5.11.0-1018.19~20.04.2" }, { "binary_name": "linux-modules-extra-5.11.0-1018-generic", "binary_version": "5.11.0-1018.19~20.04.2" }, { "binary_name": "linux-riscv-5.11-headers-5.11.0-1018", "binary_version": "5.11.0-1018.19~20.04.2" }, { "binary_name": "linux-riscv-5.11-tools-5.11.0-1018", "binary_version": "5.11.0-1018.19~20.04.2" }, { "binary_name": "linux-tools-5.11.0-1018-generic", "binary_version": "5.11.0-1018.19~20.04.2" } ], "availability": "No subscription required" }