USN-6576-1: Linux kernel (OEM) vulnerability

Lonial Con discovered that the netfilter subsystem in the Linux kernel did
not properly handle an expired catchall element in some situations, leading
to a use-after-free vulnerability. A local attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.

arbitrary code attacker code con crash denial of service expired free kernel linux linux kernel local netfilter oem service subsystem system use-after-free usn vulnerability