]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: release flow rule object from commit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 26 Oct 2022 07:54:45 +0000 (09:54 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 1 Nov 2022 11:19:47 +0000 (12:19 +0100)
commit75f465224c88ba6baae7b38164bc0f0bb26e6c2c
treee830314fb851a4cfd531659538429bdb5a47fedf
parentfecd5d9d4cf210c8af6a89b56a7565ed5635965c
netfilter: nf_tables: release flow rule object from commit path

No need to postpone this to the commit release path, since no packets
are walking over this object, this is accessed from control plane only.
This helped uncovered UAF triggered by races with the netlink notifier.

Fixes: 71d7aed70baa ("netfilter: nf_tables: memleak flow rule from commit path")
Reported-by: syzbot+8f747f62763bc6c32916@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c