Description
A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.
References (4)
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
2.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-909
CWE-824
Status
published
Products (4)
linux/linux_kernel
3.13 rc1
linux/linux_kernel
< 3.12
redhat/enterprise_linux
8.0
redhat/enterprise_linux
9.0
Published
Aug 29, 2022
Tracked Since
Feb 18, 2026