Thread (5 messages) read the whole thread 5 messages, 2 authors, 2021-12-17

Re: [PATCH net 1/3] netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()

From: patchwork-bot+netdevbpf@kernel.org
Date: 2021-12-17 11:00:16
Also in: netfilter-devel

Hello:

This series was applied to netdev/net.git (master)
by Pablo Neira Ayuso [off-list ref]:

On Fri, 17 Dec 2021 09:53:01 +0100 you wrote:
From: Eric Dumazet <edumazet@google.com>

We need to use list_for_each_entry_safe() iterator
because we can not access @catchall after kfree_rcu() call.

syzbot reported:

[...]
Here is the summary with links:
  - [net,1/3] netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
    https://git.kernel.org/netdev/net/c/0f7d9b31ce7a
  - [net,2/3] netfilter: fix regression in looped (broad|multi)cast's MAC handling
    https://git.kernel.org/netdev/net/c/ebb966d3bdfe
  - [net,3/3] netfilter: ctnetlink: remove expired entries first
    https://git.kernel.org/netdev/net/c/76f12e632a15

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help