]> www.infradead.org Git - users/dwmw2/linux.git/commit
netfilter: nf_tables: release flow rule object from commit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 26 Oct 2022 07:54:45 +0000 (09:54 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 10 Nov 2022 17:14:18 +0000 (18:14 +0100)
commitb2d7a92aff0fbd93c29d2aa6451fb99f050e2c4e
tree6f60e274cee159bdc685d2db197e4ec192d25385
parent3583826b443a63681deaa855048d3f2b742af47e
netfilter: nf_tables: release flow rule object from commit path

[ Upstream commit 26b5934ff4194e13196bedcba373cd4915071d0e ]

No need to postpone this to the commit release path, since no packets
are walking over this object, this is accessed from control plane only.
This helped uncovered UAF triggered by races with the netlink notifier.

Fixes: 9dd732e0bdf5 ("netfilter: nf_tables: memleak flow rule from commit path")
Reported-by: syzbot+8f747f62763bc6c32916@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c