]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
netfilter: nf_conntrack_helper: fix possible null deref during error log
authorFlorian Westphal <fw@strlen.de>
Sat, 9 May 2026 08:27:06 +0000 (10:27 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 16 May 2026 10:19:56 +0000 (12:19 +0200)
commit1afc25ae75288b3ce59e9e5a4b448bd354c9e565
tree5bd107b6b0825004c319e470732ce215bd45911a
parent93d809adc13001e9d3a3ceb8d1e60fae2fb740d6
netfilter: nf_conntrack_helper: fix possible null deref during error log

Reported by sashiko: there is a small race window.

If a helper module is unloaded or a userspace-defined helper is
removed, nf_conntrack_helper_unregister() sets ->helper to NULL.

Handle this safely.  This needs a second patch to close related
race during nf_conntrack_helper_unregister().

Fixes: b20ab9cc63ca ("netfilter: nf_ct_helper: better logging for dropped packets")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_helper.c