CVE-2022-50212

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> netfilter: nf_tables: do not allow CHAIN_ID to refer to another table<br /> <br /> When doing lookups for chains on the same batch by using its ID, a chain<br /> from a different table can be used. If a rule is added to a table but<br /> refers to a chain in a different table, it will be linked to the chain in<br /> table2, but would have expressions referring to objects in table1.<br /> <br /> Then, when table1 is removed, the rule will not be removed as its linked to<br /> a chain in table2. When expressions in the rule are processed or removed,<br /> that will lead to a use-after-free.<br /> <br /> When looking for chains by ID, use the table that was used for the lookup<br /> by name, and only return chains belonging to that same table.