Linux Kernel Netfilter nfnetlink_queue Memory Allocation Vulnerability

A vulnerability in the Linux kernel's netfilter component, specifically within the nfnetlink_queue, has been addressed. The issue arose because the context (ctx) in the nfqnl_build_packet_message() function could be utilized before it was properly initialized. This initialization only occurred in the nfqnl_get_sk_secctx() function. The vulnerability has been resolved by ensuring that the lsmctx is initialized to a safe value upon declaration, preventing potential memory allocation errors. This fix is akin to a previous commit that addressed a similar issue in the audit subsystem.

Impact

The vulnerability could lead to memory allocation errors, potentially causing undefined behavior or exploitation opportunities.