Kevin Rich

A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. The issue arises from the addition and removal of rules from chain bindings within the same transaction, leading to use-after-free.

A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in `nft immediate deactivate()` can lead to unbinding the chain and objects being deactivated but later used.

A use-after-free flaw was found in the Linux kernel's Netfilter functionality when adding a rule with `NFTA RULE CHAIN ID`. This flaw allows a local user to crash or escalate their privileges on the system. The issue is related to incorrect handling in the `nf tables newrule()` function in the `net/netfilter/nf tables api.c` module. Exploitation of this issue may impact the confidentiality, integrity, and availability of protected information.

A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. When `nf tables delrule()` is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances.