Kernel-memory disclosure via overbroad netfilter copies

Information disclosure in the Android kernel allows local users with System privileges to read kernel memory through netfilter control calls. The iptables export path copies whole match and target structures, including private kernel data and uninitialized trailing bytes, to userspace before overwriting selected fields. Exploitation requires local System-level execution and no user interaction; the disclosed bytes expose sensitive kernel memory without changing data or interrupting service.