A use-after-free vulnerability in the Linux kernel netfilter subsystem poses a high risk of local privilege escalation or system crashes.

This vulnerability occurs due to improper reference counting in the ebt_nflog backend, where an ebtables rule can reference a freed per-net structure during module unloading. An attacker with local, low-privileged access can trigger this race condition to achieve a use-after-free state.

The flaw permits local users to potentially escalate privileges or cause a kernel panic, leading to denial of service for critical infrastructure. With a CVSS score of 7.8, the vulnerability is rated as High because it allows a local attacker to manipulate kernel-level memory, which could compromise the confidentiality, integrity, and availability of the entire operating system.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, or newer, depending on your distribution branch.

Proactive Monitoring: Monitor system logs for kernel oops or bug reports related to netfilter or ebtables to detect potential exploitation attempts.

Compensating Controls: Restrict access to local user accounts and audit the use of eb-tables configurations on systems where such filtering is not strictly required.

Public Exploit Available: Unknown

Given the potential for local privilege escalation and the critical nature of kernel-level vulnerabilities, administrators should prioritize patching affected systems. Apply the specified kernel updates immediately to eliminate the underlying race condition and maintain system integrity.