]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: release flow rule object from commit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 26 Oct 2022 07:54:45 +0000 (09:54 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 10 Nov 2022 16:57:51 +0000 (17:57 +0100)
commit39f71134572e54c864294fad8a72ad7e0582c67e
tree0993c378196bbdd22a334ff42be9186e1a5ef392
parent685405941eafc85d10edf58e6961ec364323dccf
netfilter: nf_tables: release flow rule object from commit path

[ Upstream commit d43fa6b9b2ce34e94948b288997558d461c0e051 ]

No need to postpone this to the commit release path, since no packets
are walking over this object, this is accessed from control plane only.
This helped uncovered UAF triggered by races with the netlink notifier.

Fixes: 2c70a5f4b0a6 ("netfilter: nf_tables: memleak flow rule from commit path")
Reported-by: syzbot+8f747f62763bc6c32916@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c