]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_tables: remove catchall element in GC sync path
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 21 Nov 2023 12:14:21 +0000 (13:14 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 28 Nov 2023 17:07:12 +0000 (17:07 +0000)
commit13e2d49647a7f137ebc063a4a9702dda80371b2e
tree606578afbe7b613357cc8cdbfe6ccf513d3bc122
parent143f450c6cb28890da0002ebd1764cc804258de1
netfilter: nf_tables: remove catchall element in GC sync path

[ Upstream commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630 ]

The expired catchall element is not deactivated and removed from GC sync
path. This path holds mutex so just call nft_setelem_data_deactivate()
and nft_setelem_catchall_remove() before queueing the GC work.

Fixes: 4a9e12ea7e70 ("netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC")
Reported-by: lonial con <kongln9170@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c