{
  "cveId": "CVE-2021-46992",
  "url": "https://patchblox.com/security/cve/CVE-2021-46992",
  "summary": "CVE-2021-46992 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-46992, released February 28, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nftables: avoid overflows in nft_hash...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  netfilter: nftables: avoid overflows in nft_hash_buckets()  Number of buckets being stored in 32bit variables, we have to ensure that no overflows occur in nft_hash_buckets()  syzbot injected a size == 0x40000000 and reported:  UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 shift exponent 64 is too large for 64-bit type \u0027long unsigned int\u0027 CPU: 1 PID: 29539 Comm: syz-executor.4 Not tainted 5.12.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace:  __dump_stack lib/dump_stack.c:79 [inline]  dump_stack\u002B0x141/0x1d7 lib/dump_stack.c:120  ubsan_epilogue\u002B0xb/0x5a lib/ubsan.c:148  __ubsan_handle_shift_out_of_bounds.cold\u002B0xb1/0x181 lib/ubsan.c:327  __roundup_pow_of_two include/linux/log2.h:57 [inline]  nft_hash_buckets net/netfilter/nft_set_hash.c:411 [inline]  nft_hash_estimate.cold\u002B0x19/0x1e net/netfilter/nft_set_hash.c:652  nft_select_set_ops net/netfilter/nf_tables_api.c:3586 [inline]  nf_tables_newset\u002B0xe62/0x3110 net/netfilter/nf_tables_api.c:4322  nfnetlink_rcv_batch\u002B0xa09/0x24b0 net/netfilter/nfnetlink.c:488  nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:612 [inline]  nfnetlink_rcv\u002B0x3af/0x420 net/netfilter/nfnetlink.c:630  netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline]  netlink_unicast\u002B0x533/0x7d0 net/netlink/af_netlink.c:1338  netlink_sendmsg\u002B0x856/0xd90 net/netlink/af_netlink.c:1927  sock_sendmsg_nosec net/socket.c:654 [inline]  sock_sendmsg\u002B0xcf/0x120 net/socket.c:674  ____sys_sendmsg\u002B0x6e8/0x810 net/socket.c:2350  ___sys_sendmsg\u002B0xf3/0x170 net/socket.c:2404  __sys_sendmsg\u002B0xe5/0x1b0 net/socket.c:2433  do_syscall_64\u002B0x2d/0x70 arch/x86/entry/common.c:46",
  "published": "2024-02-28T09:15:37Z",
  "severity": "high",
  "cvss": 7.1,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
  "epss": 0.00263,
  "epssPercentile": 0.18195,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.10.38-1",
      "fix": "DEBIAN-CVE-2021-46992",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46992",
      "released": "2024-02-28T09:15:37Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.10.38-1",
      "fix": "DEBIAN-CVE-2021-46992",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46992",
      "released": "2024-02-28T09:15:37Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.10.38-1",
      "fix": "DEBIAN-CVE-2021-46992",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-46992",
      "released": "2024-02-28T09:15:37Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}