netfilter: nf_tables: release flow rule object from commit path
stable inclusion from stable-v5.10.154 commit b2d7a92aff0fbd93c29d2aa6451fb99f050e2c4e category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I64YCB Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2d7a92aff0fbd93c29d2aa6451fb99f050e2c4e -------------------------------- [ Upstream commit 26b5934f ] No need to postpone this to the commit release path, since no packets are walking over this object, this is accessed from control plane only. This helped uncovered UAF triggered by races with the netlink notifier. Fixes: 9dd732e0 ("netfilter: nf_tables: memleak flow rule from commit path") Reported-by:<syzbot+8f747f62763bc6c32916@syzkaller.appspotmail.com> Signed-off-by:
Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by:
Sasha Levin <sashal@kernel.org> Signed-off-by:
Lipeng Sang <sanglipeng1@jd.com>
Loading
Please sign in to comment