CVE-2024-56655

CVE-2024-56655 affects the Linux kernel nf_tables path under netfilter. The root cause is deferred destruction of rules via call_rcu, where nf_tables_chain_destroy can sleep and the to-be-destroyed rule could be exposed to datapath/dumps without a required synchronize_rcu() in between. nf_table_r...