Thread (2 messages) flat view 2 messages, 2 authors, 9h ago

Re: [PATCH 6.1.y] netfilter: nf_tables: make nft_object rhltable per table

From: Sasha Levin <sashal@kernel.org>
Date: 2026-09-06 13:33:51
Also in: netfilter-devel, stable

The nft_object rhltable is global, this allows for accessing objects
that are being dismangled from lookup path by other existing netns.
Given the nft_obj_destroy() releases the object inmediately, this might
lead to use-after-free of these objects that are being released.
Make the existing rhltable per table to address this issue to deal with
Queued for 6.1, thanks.

-- 
Thanks,
Sasha
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help