Davide Ornaghi

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: The issue is related to the `nft inner` component of the Linux kernel, which can lead to a NULL pointer dereference from userspace when mandatory netlink attributes in payload and meta expression are not validated. This can cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions 5.5 through 6.2-rc3 **Description** A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel, specifically in nftables. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution. The vulnerability is related to a stack buffer-overflow in the netfilter subsystem from the softirq context. **Recommendations** For Linux kernel versions 5.5 through 6.2-rc3, consider disabling the nftables subsystem as a temporary workaround until a patch is available. Restrict access to the vulnerable Netfilter subsystem to minimize the risk of exploitation. Avoid using the nftables functionality in the affected Linux kernel versions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a null pointer dereference flaw in the Linux kernel's DECnet networking protocol. This flaw can be exploited by a remote user to crash the system by sending a specially crafted "Hello" message. The exploitation of this issue can lead to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.