]> git.ipfire.org Git - thirdparty/linux.git/commit
projects / thirdparty / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: eb63177) | patch
netfilter: nft_ct: fix missing expect put in obj eval
authorLi Xiasong <lixiasong1@huawei.com>
Thu, 7 May 2026 14:04:23 +0000 (22:04 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 7 May 2026 23:30:17 +0000 (01:30 +0200)
commit19f94b6fee75b3ef7fbc06f3745b9a771a8a19a4
tree697ef229a9766700512832105da8bd6949d7f15ctree | snapshot
parenteb6317739b1ea3ab28791e1f91b24781905fa815commit | diff
netfilter: nft_ct: fix missing expect put in obj eval

nft_ct_expect_obj_eval() allocates an expectation and may call
nf_ct_expect_related(), but never drops its local reference.

Add nf_ct_expect_put(exp) before return to balance allocation.

Fixes: 857b46027d6f ("netfilter: nft_ct: add ct expectations support")
Cc: stable@vger.kernel.org
Signed-off-by: Li Xiasong <lixiasong1@huawei.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_ct.c diff | blob | blame | history
A mirror of Linus' kernel repository