netfilter: nf_tables: validate family when identifying table via handle
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 4 Dec 2023 13:51:48 +0000 (14:51 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 13 Dec 2023 17:45:10 +0000 (18:45 +0100)
commitfa72b6e62fa52ce777344cf62d9852e7d938f2d2
tree73fb126e437286632c624c3998e02e1d05f3df93
parent5eeba00a89c5c6be4e45b69bef20d1d1b9edb968
netfilter: nf_tables: validate family when identifying table via handle

[ Upstream commit f6e1532a2697b81da00bfb184e99d15e01e9d98c ]

Validate table family when looking up for it via NFTA_TABLE_HANDLE.

Fixes: 3ecbfd65f50e ("netfilter: nf_tables: allocate handle and delete objects via handle")
Reported-by: Xingyuan Mo <hdthky0@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c