Use-after-free in Linux kernel's netfilter: nf_tables component

A flaw in Linux kernel's netfilter allows a local attacker to cause a double free in memory, leading to privilege escalation. The vulnerability occurs when incorrect drop error values are processed, potentially crashing the system or gaining admin-level access.

Use-after-free vulnerability in nf_tables component where nft_verdict_init() improperly validates positive drop error values in hook verdicts, causing nf_hook_slow() to trigger double-free conditions when NF_DROP is issued with error codes resembling NF_ACCEPT. Local attacker with unprivileged user access can exploit this for privilege escalation.