]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: release flow rule object from commit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 26 Oct 2022 07:54:45 +0000 (09:54 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 1 Nov 2022 11:19:47 +0000 (12:19 +0100)
commitd43fa6b9b2ce34e94948b288997558d461c0e051
treee830314fb851a4cfd531659538429bdb5a47fedf
parent8aed9837d587aef2a67a483a68a2cb196ad5ef02
netfilter: nf_tables: release flow rule object from commit path

No need to postpone this to the commit release path, since no packets
are walking over this object, this is accessed from control plane only.
This helped uncovered UAF triggered by races with the netlink notifier.

Fixes: 2c70a5f4b0a6 ("netfilter: nf_tables: memleak flow rule from commit path")
Reported-by: syzbot+8f747f62763bc6c32916@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c