Use-After-Free Vulnerability in Linux Kernel's Netfilter Module

CVE-2022-50212

What is CVE-2022-50212?

A vulnerability exists in the Linux kernel's Netfilter framework where chain identifiers (CHAIN_ID) can incorrectly reference chains from different tables. This can lead to exploitation when a rule that refers to a chain in another table remains intact after the original table is removed, resulting in a use-after-free condition. To mitigate this issue, it is critical to ensure that chain lookups are constrained to refer only to chains within the same table used for the lookup.

References