Linux Kernel Netfilter nf_tables Hook Registration Vulnerability

A vulnerability in the Linux kernel's netfilter component, specifically within nf_tables, has been addressed. The issue arose because the system improperly managed hook registrations when an error occurred during chain updates. This mismanagement could lead to inconsistencies, as hooks were unregistered from tables marked as dormant or inactive. The vulnerability has been resolved by ensuring that hook unregistration only occurs after a successful registration, thereby maintaining the integrity of the table's active state.

Impact

The vulnerability could lead to improper hook management, potentially causing issues in packet filtering or manipulation processes managed by nf_tables.