CVE-2021-46283

nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.

• CWE-665

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad9f151e560b016b6ad3280b48e42fa11e1a5440Patch, Vendor Advisory
• https://syzkaller.appspot.com/bug?id=22c3987f75a7b90e238a26b5a5920525c2d1f345Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13Release Notes, Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad9f151e560b016b6ad3280b48e42fa11e1a5440Patch, Vendor Advisory
• https://syzkaller.appspot.com/bug?id=22c3987f75a7b90e238a26b5a5920525c2d1f345Third Party Advisory

Published

Jan 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-46262Tenda AC Series Router AC11_V02.03.01.104_CN was discovered …9.8
• CVE-2021-46263Tenda AC Series Router AC11_V02.03.01.104_CN was discovered …9.8
• CVE-2021-46264Tenda AC Series Router AC11_V02.03.01.104_CN was discovered …9.8
• CVE-2021-46265Tenda AC Series Router AC11_V02.03.01.104_CN was discovered …9.8
• CVE-2021-46270JFrog Artifactory before 7.31.10, is vulnerable to Broken Ac…2.7
• CVE-2021-46279Session fixation and insufficient session expiration vulnera…8.8
• CVE-2021-46304A vulnerability has been identified in CP-8000 MASTER MODULE…7.5
• CVE-2021-46307An SQL Injection vulnerability exists in Projectworlds Onlin…9.8
• CVE-2021-46308An SQL Injection vulnerability exists in Sourcecodester Onli…9.8
• CVE-2021-46309An SQL Injection vulnerability exists in Sourcecodester Empl…9.8
• CVE-2021-46310An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in…6.5
• CVE-2021-46311A NULL pointer dereference vulnerability exists in GPAC v1.1…5.5