projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d4bc827) | patch
netfilter: nf_tables: release flow rule object from commit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 26 Oct 2022 07:54:45 +0000 (09:54 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 1 Nov 2022 11:19:47 +0000 (12:19 +0100)
commit26b5934ff4194e13196bedcba373cd4915071d0e
treee830314fb851a4cfd531659538429bdb5a47fedftree | snapshot
parentd4bc8271db21ea9f1c86a1ca4d64999f184d4aaecommit | diff
netfilter: nf_tables: release flow rule object from commit path

No need to postpone this to the commit release path, since no packets
are walking over this object, this is accessed from control plane only.
This helped uncovered UAF triggered by races with the netlink notifier.

Fixes: 9dd732e0bdf5 ("netfilter: nf_tables: memleak flow rule from commit path")
Reported-by: syzbot+8f747f62763bc6c32916@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c diff | blob | history
Domain: System / Kernel;