netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path

Browse source

[ Upstream commit 6a33d8b73d ]

Netlink event path is missing a synchronization point with GC
transactions. Add GC sequence number update to netns release path and
netlink event path, any GC transaction losing race will be discarded.

Fixes: 5f68718b34 ("netfilter: nf_tables: GC transaction API to avoid race with control plane")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Pablo Neira Ayuso 2023-08-15 15:39:00 +02:00 • committed by Greg Kroah-Hartman

parent 6650bebaa5

commit 3bdf400a1a

1 changed files with 32 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

36

net/netfilter/nf_tables_api.c

View file