It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

{
                    "vendor": "The Linux Kernel Organization",
                    "product": "linux",
                    "platforms": [
                        "Linux"
                    ],
                    "packageName": "linux",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "3.16",
                            "lessThan": "4.14.316",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "4.15",
                            "lessThan": "4.19.256",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "4.20",
                            "lessThan": "5.4.211",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "5.5",
                            "lessThan": "5.10.137",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "5.11",
                            "lessThan": "5.15.61",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "5.16",
                            "lessThan": "5.18.18",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "5.19",
                            "lessThan": "5.19.2",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }