nftablesnewset in net/netfilter/nftablesapi.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nftsetelemexpralloc. A local user can set a netfilter table expression in their own namespace.
{ "binaries": [ { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-aws-5.11-cloud-tools-5.11.0-1017" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-aws-5.11-headers-5.11.0-1017" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-aws-5.11-tools-5.11.0-1017" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-buildinfo-5.11.0-1017-aws" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-cloud-tools-5.11.0-1017-aws" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-headers-5.11.0-1017-aws" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-image-5.11.0-1017-aws" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-image-5.11.0-1017-aws-dbgsym" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-modules-5.11.0-1017-aws" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-modules-extra-5.11.0-1017-aws" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-tools-5.11.0-1017-aws" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-azure-5.11-cloud-tools-5.11.0-1015" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-azure-5.11-headers-5.11.0-1015" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-azure-5.11-tools-5.11.0-1015" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-buildinfo-5.11.0-1015-azure" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-cloud-tools-5.11.0-1015-azure" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-headers-5.11.0-1015-azure" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-image-unsigned-5.11.0-1015-azure" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-image-unsigned-5.11.0-1015-azure-dbgsym" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-modules-5.11.0-1015-azure" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-modules-extra-5.11.0-1015-azure" }, { "binary_version": "5.11.0-1015.16~20.04.1", "binary_name": "linux-tools-5.11.0-1015-azure" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-buildinfo-5.11.0-1018-gcp" }, { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-gcp-5.11-headers-5.11.0-1018" }, { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-gcp-5.11-tools-5.11.0-1018" }, { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-headers-5.11.0-1018-gcp" }, { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-image-unsigned-5.11.0-1018-gcp" }, { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-image-unsigned-5.11.0-1018-gcp-dbgsym" }, { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-modules-5.11.0-1018-gcp" }, { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-modules-extra-5.11.0-1018-gcp" }, { "binary_version": "5.11.0-1018.20~20.04.2", "binary_name": "linux-tools-5.11.0-1018-gcp" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "5.10.0-1050.52", "binary_name": "linux-buildinfo-5.10.0-1050-oem" }, { "binary_version": "5.10.0-1050.52", "binary_name": "linux-headers-5.10.0-1050-oem" }, { "binary_version": "5.10.0-1050.52", "binary_name": "linux-image-unsigned-5.10.0-1050-oem" }, { "binary_version": "5.10.0-1050.52", "binary_name": "linux-image-unsigned-5.10.0-1050-oem-dbgsym" }, { "binary_version": "5.10.0-1050.52", "binary_name": "linux-modules-5.10.0-1050-oem" }, { "binary_version": "5.10.0-1050.52", "binary_name": "linux-oem-5.10-headers-5.10.0-1050" }, { "binary_version": "5.10.0-1050.52", "binary_name": "linux-oem-5.10-tools-5.10.0-1050" }, { "binary_version": "5.10.0-1050.52", "binary_name": "linux-oem-5.10-tools-host" }, { "binary_version": "5.10.0-1050.52", "binary_name": "linux-tools-5.10.0-1050-oem" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-buildinfo-5.11.0-1017-oracle" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-headers-5.11.0-1017-oracle" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-image-unsigned-5.11.0-1017-oracle" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-image-unsigned-5.11.0-1017-oracle-dbgsym" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-modules-5.11.0-1017-oracle" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-modules-extra-5.11.0-1017-oracle" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-oracle-5.11-headers-5.11.0-1017" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-oracle-5.11-tools-5.11.0-1017" }, { "binary_version": "5.11.0-1017.18~20.04.1", "binary_name": "linux-tools-5.11.0-1017-oracle" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-buildinfo-5.11.0-1018-generic" }, { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-headers-5.11.0-1018-generic" }, { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-image-5.11.0-1018-generic" }, { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-image-5.11.0-1018-generic-dbgsym" }, { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-modules-5.11.0-1018-generic" }, { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-modules-extra-5.11.0-1018-generic" }, { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-riscv-5.11-headers-5.11.0-1018" }, { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-riscv-5.11-tools-5.11.0-1018" }, { "binary_version": "5.11.0-1018.19~20.04.2", "binary_name": "linux-tools-5.11.0-1018-generic" } ], "availability": "No subscription required" }