]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 15 Apr 2026 15:56:14 +0000 (17:56 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 21 Apr 2026 10:48:44 +0000 (12:48 +0200)
commita6134e62dba2ea4f760b29d5226907f447c92400
treef1b262c46372af2f524c2c264e0b9ab58123918d
parentf902877b635551513729bdf9a8d1422c4aab7741
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase

Publish new hooks in the list into the basechain/flowtable using
splice_list_rcu() to ensure netlink dump list traversal via rcu is safe
while concurrent ruleset update is going on.

Fixes: 78d9f48f7f44 ("netfilter: nf_tables: add devices to existing flowtable")
Fixes: b9703ed44ffb ("netfilter: nf_tables: support for adding new devices to an existing netdev chain")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c