linux-stable-mirror

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-08 18:13:59 +02:00

Files

T

Pablo Neira Ayuso f8cebc41af netfilter: nf_conntrack_expect: store netns and zone in expectation

[ Upstream commit 02a3231b6d ]

__nf_ct_expect_find() and nf_ct_expect_find_get() are called under
rcu_read_lock() but they dereference the master conntrack via
exp->master.

Since the expectation does not hold a reference on the master conntrack,
this could be dying conntrack or different recycled conntrack than the
real master due to SLAB_TYPESAFE_RCU.

Store the netns, the master_tuple and the zone in struct
nf_conntrack_expect as a safety measure.

This patch is required by the follow up fix not to dump expectations
that do not belong to this netns.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Stable-dep-of: 917b61fa20 ("netfilter: ctnetlink: ignore explicit helper on new expectations")
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-04-11 14:24:35 +02:00

acpi

APEI/GHES: ensure that won't go past CPER allocated record

2026-03-04 07:20:54 -05:00

asm-generic

audit: add missing syscalls to read class

2026-03-04 07:20:51 -05:00

clocksource

…

crypto

…

cxl