]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nft_set_rbtree: skip end interval element from gc
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 7 Feb 2024 17:49:51 +0000 (18:49 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 23 Feb 2024 07:42:22 +0000 (08:42 +0100)
commit4cee42fcf54fec46b344681e7cc4f234bb22f85a
treefae516a972dd6ad4821558a02dfeeb9099bd5030
parentfeace3c2404454fb049f2dcb028c4205ffaaa5cb
netfilter: nft_set_rbtree: skip end interval element from gc

commit 60c0c230c6f046da536d3df8b39a20b9a9fd6af0 upstream.

rbtree lazy gc on insert might collect an end interval element that has
been just added in this transactions, skip end interval elements that
are not yet active.

Fixes: f718863aca46 ("netfilter: nft_set_rbtree: fix overlap expiration walk")
Cc: stable@vger.kernel.org
Reported-by: lonial con <kongln9170@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_set_rbtree.c