Use After Free Vulnerability in Linux Kernel's Netfilter nf_tables

CVE-2022-49919

What is CVE-2022-49919?

This vulnerability in the Linux kernel's netfilter component could lead to a use after free condition triggered by race conditions with the netlink notifier. By optimizing the release of flow rule objects, the need to delay this operation to the commit release path has been eliminated. This enhancement improves memory management in control plane operations, ensuring better stability and security in packet handling.

References