]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_tables: discard table flag update with pending basechain deletion
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 3 Apr 2024 17:35:30 +0000 (19:35 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 10 Apr 2024 14:35:50 +0000 (16:35 +0200)
commit9627fd0c6ea1c446741a33e67bc5709c59923827
tree0bc8b357d30bc3369d7dfc3eb84371b73f2766a4
parent8b891153b2e4dc0ca9d9dab8f619d49c740813df
netfilter: nf_tables: discard table flag update with pending basechain deletion

commit 1bc83a019bbe268be3526406245ec28c2458a518 upstream.

Hook unregistration is deferred to the commit phase, same occurs with
hook updates triggered by the table dormant flag. When both commands are
combined, this results in deleting a basechain while leaving its hook
still registered in the core.

Fixes: 179d9ba5559a ("netfilter: nf_tables: fix table flag updates")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_tables_api.c