CVE-2022-49919

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: release flow rule object from commit path

No need to postpone this to the commit release path, since no packets are walking over this object, this is accessed from control plane only. This helped uncovered UAF triggered by races with the netlink notifier.

A use-after-free vulnerability was identified in the nf_tables subsystem of the Linux kernel. The flow rule object was previously released too late during the commit release path, which could result in race conditions when netlink notifications are processed concurrently. The fix moves the destruction of the flow rule earlier in the commit phase to eliminate the window for race-triggered UAF. The flaw can be triggered locally via crafted netlink messages and may lead to system instability or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.