Local information disclosure via double deactivation

Information disclosure in the Linux Kernel allows local users to read kernel memory via nft_set_catchall_flush catchall-element flushing. The function can deactivate catchall elements twice during a flush, leaving allocated memory unreclaimed and exposing its contents. Access requires local low-privilege ability to invoke the nftables interface; the bounded consequence is kernel-memory disclosure rather than remote access or code execution.