CVE-2022-50212: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability has been identified in the Linux kernel's netfilter nf_tables component, tracked as CVE-2022-50212. The issue was disclosed and documented in June 2025, affecting the chain ID reference handling in the Linux kernel (NVD, Wiz).

The vulnerability occurs when performing lookups for chains on the same batch using its ID, where a chain from a different table can be incorrectly referenced. If a rule is added to a table but refers to a chain in a different table, it becomes linked to the chain in the second table while maintaining expressions referencing objects in the first table. When the first table is removed, the rule persists due to its link to the second table's chain (NVD, Wiz).

When expressions in the affected rule are processed or removed after the original table's deletion, it results in a use-after-free condition. This can potentially lead to system instability or security compromises (Wiz).

The fix involves modifying the chain lookup process to ensure it only returns chains belonging to the same table that was used for the lookup by name. When looking for chains by ID, the system should use the table that was used for the lookup by name, and only return chains belonging to that same table (NVD).