Davide Ornaghi

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to the `nft inner` component of the Linux kernel, which can lead to a NULL pointer dereference from userspace when mandatory netlink attributes in payload and meta expression are not validated. This can cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel, specifically in nftables. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution. The vulnerability is related to a stack buffer-overflow in the netfilter subsystem from the softirq context.

The issue is related to a null pointer dereference flaw in the Linux kernel's DECnet networking protocol. This flaw can be exploited by a remote user to crash the system by sending a specially crafted "Hello" message. The exploitation of this issue can lead to a denial of service.