]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ac10143) | patch
netfilter: nft_fwd_netdev: validate family and chain type
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 23 Mar 2020 13:27:16 +0000 (14:27 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 1 Apr 2020 09:00:17 +0000 (11:00 +0200)
commit7edb2cefd3d12b47761051fc8eb6a7ebee9f191c
treef033483a23371d59e24c8519cc5c5fb139491881tree | snapshot
parentac10143c4644001d0d57ac79cad3a34c217f8c7fcommit | diff
netfilter: nft_fwd_netdev: validate family and chain type

commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.

Make sure the forward action is only used from ingress.

Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_fwd_netdev.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git