The issue is related to a memory leak in the `nf tables updchain` function of the Linux kernel's netfilter component. When `nft netdev register hooks()` fails, the memory associated with `nft stats` is not freed, causing a memory leak. This can lead to a denial of service. The patch fixes the issue by moving `nft stats alloc()` down after `nft netdev register hooks()` succeeds.