nf_tables UAF fix headed to Linux 6.12, 6.6, and 6.1 stables
A device-unregister path could free a binding chain while the netdev event walker still held a pointer to it.
By kexec#netfilter
Incomplete nftables backport leaves UAF in Linux stable kernels
Omitted commits from a 2024 pipapo series leave use-after-free and double-free bugs in 6.6.y and older trees.
By kexec