CVE-2022-50780

A use-after-free vulnerability was found in the Linux kernel's netfilter queue subsystem. When setting up a new network namespace, if ops->init() fails during ops_init(), the allocated data is freed but the pointer in net->gen remains pointing to the freed memory. When nfqnl_nf_hook_drop() is subsequently called during cleanup, it dereferences this invalid pointer, causing a use-after-free condition.

This flaw can be triggered by unprivileged users who have the ability to create network namespaces via the unshare() syscall. When namespace initialization fails, the cleanup path accesses freed memory, potentially causing a kernel crash. The vulnerability provides a local denial of service vector on systems where user namespaces are enabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.