]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_tables: discard table flag update with pending basechain deletion
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 8 Apr 2024 21:19:30 +0000 (23:19 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 13 Apr 2024 11:01:47 +0000 (13:01 +0200)
commit6cbbe1ba76ee7e674a86abd43009b083a45838cb
tree57aef9358c735e1d262e78cecdb9de7cecbb795c
parenteb769ff4e281f751adcaf4f4445cbf30817be139
netfilter: nf_tables: discard table flag update with pending basechain deletion

commit 1bc83a019bbe268be3526406245ec28c2458a518 upstream.

Hook unregistration is deferred to the commit phase, same occurs with
hook updates triggered by the table dormant flag. When both commands are
combined, this results in deleting a basechain while leaving its hook
still registered in the core.

Fixes: 179d9ba5559a ("netfilter: nf_tables: fix table flag updates")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c