Linux Kernel Netfilter CTNetlink Master Connection Tracking Access Vulnerability

A vulnerability in the Linux kernel's netfilter component can lead to improper handling of connection tracking expectations. The issue arises because holding a reference to an expectation is not enough; the master connection tracking object can be deleted, rendering the reference invalid. This vulnerability affects the Linux kernel stable tree.

Impact

This vulnerability could lead to use-after-free conditions, where a reference to a deleted object is still being used, potentially causing memory corruption or other unintended behavior.

Remediation

Users can apply the patch available in the Linux kernel stable tree to address this vulnerability.