Linux Kernel ILA Netfilter Hook Race Condition Vulnerability Allowing Use-After-Free

A race condition vulnerability has been identified in the Linux kernel's Inline Local Address (ILA) handling, specifically within the netfilter framework. This vulnerability allows for a use-after-free condition, which can be exploited by concurrent ILA_CMD_ADD commands. The issue arises because calls to nf_register_net_hooks() are not properly serialized, leading to potential memory corruption.

Impact

Exploitation of this vulnerability causes a use-after-free condition, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by sending concurrent ILA_CMD_ADD commands while the system is running a vulnerable version of the Linux kernel. This can be done using a tool like syzkaller, which is designed to find and exploit such race conditions in kernel code.