This vulnerability in the Linux kernel's netfilter nf_tables component was caused by the existing approach moving hooks from the basechain/flowtable hook_list to a transaction hook_list during device deletions. This behavior broke netlink dump path readers relying on the RCU-protected list. The fix restores the NFT_HOOK_REMOVE flag and adds a transaction object to track hook deletions without modifying the basechain/flowtable hook_list during preparation. Additionally, the event notification path was adapted to handle the new list of hook transactions, improving consistency and stability in hook management.

The vulnerability could disrupt the integrity of netlink dump path readers accessing the RCU-protected hook list, potentially causing incorrect behavior or instability in netfilter operations. No direct exploitation details or impact on confidentiality, integrity, or availability are provided. Known exploits in the wild are not reported.

A fix has been implemented in the Linux kernel to address this vulnerability. Users should apply the official kernel updates that include this patch. Since no cloud service is involved, remediation depends on deploying the updated kernel version. Patch status is not explicitly confirmed in the provided data; users should consult the Linux kernel vendor advisory or distribution security updates for the official fix and deployment instructions.