Re: [PATCH net 1/1] netfilter: nf_tables: unconditionally flush pending work before notifier

Hello:

This patch was applied to netdev/net.git (main)
by Pablo Neira Ayuso [off-list ref]:

On Thu,  4 Jul 2024 00:33:04 +0200 you wrote:

From: Florian Westphal <fw@strlen.de>

syzbot reports:

KASAN: slab-uaf in nft_ctx_update include/net/netfilter/nf_tables.h:1831
KASAN: slab-uaf in nft_commit_release net/netfilter/nf_tables_api.c:9530
KASAN: slab-uaf int nf_tables_trans_destroy_work+0x152b/0x1750 net/netfilter/nf_tables_api.c:9597
Read of size 2 at addr ffff88802b0051c4 by task kworker/1:1/45
[..]
Workqueue: events nf_tables_trans_destroy_work
Call Trace:
 nft_ctx_update include/net/netfilter/nf_tables.h:1831 [inline]
 nft_commit_release net/netfilter/nf_tables_api.c:9530 [inline]
 nf_tables_trans_destroy_work+0x152b/0x1750 net/netfilter/nf_tables_api.c:9597

[...]

Here is the summary with links:
  - [net,1/1] netfilter: nf_tables: unconditionally flush pending work before notifier
    https://git.kernel.org/netdev/net/c/9f6958ba2e90

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html