]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_conncount: update last_gc only when GC has been performed
authorFernando Fernandez Mancera <fmancera@suse.de>
Wed, 17 Dec 2025 14:46:40 +0000 (15:46 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Jan 2026 15:29:57 +0000 (16:29 +0100)
commit3cd717359e56f82f06cbf8279b47a7d79880c6f3
tree24a08381d5122e8320ae76439885a04a723a2f63
parentc6cfd767005511b92031c9cba787392ac1f4eb82
netfilter: nf_conncount: update last_gc only when GC has been performed

[ Upstream commit 7811ba452402d58628e68faedf38745b3d485e3c ]

Currently last_gc is being updated everytime a new connection is
tracked, that means that it is updated even if a GC wasn't performed.
With a sufficiently high packet rate, it is possible to always bypass
the GC, causing the list to grow infinitely.

Update the last_gc value only when a GC has been actually performed.

Fixes: d265929930e2 ("netfilter: nf_conncount: reduce unnecessary GC")
Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_conncount.c