The vulnerability arises when nf_nat_register_fn() attempts to dereference a pointer that has been set to NULL or uninitialized following a failed nf_nat_init() call. The resulting out‑of‑bounds read can leak kernel memory contents, potentially exposing sensitive data or facilitating privilege escalation. This is an instance of out‑of‑bounds memory access (CWE‑125).

The flaw exists in the Linux kernel’s netfilter implementation, affecting all kernel releases that contain the nf_nat code without the patch. Version information is not provided by the CNA; administrators should compare their running kernel against the Git commit hashes listed in the references to determine whether the fix is present.

The likely attack vector is the receipt of crafted network packets processed through iptables or other netfilter hooks that trigger the nf_nat module. No CVSS or EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. Despite the lack of publicly published exploitation evidence, the out‑of‑bounds read could expose kernel secrets or be leveraged in chained attacks to elevate privileges or exfiltrate data.