]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
netfilter: nft_ct: fix missing expect put in obj eval
authorLi Xiasong <lixiasong1@huawei.com>
Thu, 7 May 2026 14:04:23 +0000 (22:04 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 7 May 2026 23:30:17 +0000 (01:30 +0200)
commit19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4
tree697ef229a9766700512832105da8bd6949d7f15c
parenteb6317739b1ea3ab28791e1f91b24781905fa815
netfilter: nft_ct: fix missing expect put in obj eval

nft_ct_expect_obj_eval() allocates an expectation and may call
nf_ct_expect_related(), but never drops its local reference.

Add nf_ct_expect_put(exp) before return to balance allocation.

Fixes: 857b46027d6f ("netfilter: nft_ct: add ct expectations support")
Cc: stable@vger.kernel.org
Signed-off-by: Li Xiasong <lixiasong1@huawei.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_ct.c