Comment Re:So, how does that cause privilege escalation? (Score 2) 18
At least on my systems you need to be root do to anything with nf_tables. Is this some distro specific permission stupidity?
Maybe. There's a feature called user namespaces in Linux that effectively allows an unprivileged user to act as if they were a privileged user within a specific environment. (Basically, containerization.) Within such a namespace, a non-privileged user could conceptually access nf_tables as if they were a privileged user. In theory this would only allow them to add additional filters within the namespace, but the vulnerability here can provide direct access to kernel memory.
Some distros add additional layers of security to prevent flaws like that, blocking access to nf_tables even within a namespace, but the vulnerability links to ways around those. (Link to the Wayback Machine from the source vulnerability disclosure.)
It's possible your distro may be secure - or it may not be. It depends on what features are enabled.