The vulnerability in the Linux kernel's netfilter ebt_nflog component arises from nf_log_unregister() running after per-net teardown, causing a use-after-free when ebt_nflog passes an explicit ULOG log type to nf_log_packet() without holding a reference on the logger module. This allows an ebtables nflog rule to remain callable after the nfnetlink_log module is unloaded, leading to dereferencing freed memory, as confirmed by KASAN reports. The fix ensures the ULOG logger module reference is acquired when an ebt_nflog rule is validated and released when destroyed, matching the behavior of other frontends and preventing module teardown until all rules stop using the logger.

The vulnerability can cause a kernel use-after-free condition, potentially leading to kernel crashes or memory corruption. There is no indication of active exploitation in the wild. The impact is limited to kernel stability and reliability rather than direct privilege escalation or data compromise based on the provided information.

A fix has been implemented in the Linux kernel to acquire and release the ULOG logger module reference properly in ebt_nflog rules, preventing use-after-free during module unload. Users should update to the fixed kernel version once available. Patch status is not yet confirmed from the vendor advisory; check the official Linux kernel advisories or distribution updates for the specific fixed versions and apply them accordingly.