CVE-2023-6622Medium· 5.5▾ SunlitA null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service.
kernel-rt (all versions)kernel (all versions)kernel (all versions)kernel (all versions)kernelkernelkernel-rtkernel-rt (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation for this issue is to skip loading the affected module "netfilter" onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.
How do I blacklist a kernel module to prevent it from loading automatically?
https://access.redhat.com/solutions/41278
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-0841Medium· 6.6Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function
CVE-2023-6915Medium· 6.2Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
CVE-2023-6356Medium· 6.5Kernel: null pointer dereference in nvmet_tcp_build_iovec
CVE-2023-6535Medium· 6.5Kernel: null pointer dereference in nvmet_tcp_execute_request
CVE-2023-6536Medium· 6.5Kernel: null pointer dereference in __nvmet_req_complete
CVE-2026-119728Medium· 6.5Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure