]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 43814e6) | patch
netfilter: nf_tables: hold mutex on netns pre_exit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 30 May 2022 16:24:05 +0000 (18:24 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 31 May 2022 21:13:10 +0000 (23:13 +0200)
commita669e8adb86a13fd522e3f4619d80500123fc268
tree007a0067530e3399f299eda20c7498d2306c2ccetree | snapshot
parent43814e60dcd38a7e721d1b4ea6d9d9571ffa9f3bcommit | diff
netfilter: nf_tables: hold mutex on netns pre_exit path

clean_net() runs in workqueue while walking over the lists, grab mutex.

Fixes: 815fac68e781 ("netfilter: nftables: fix possible UAF over chains from packet path in netns")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c diff | blob | history
Linux Kernel Source Tree.