Files
linux-stable-mirror/include/linux
Florian Westphal b4597d5fd7 netfilter: x_tables: add and use xtables_unregister_table_exit
Previous change added xtables_unregister_table_pre_exit to detach the
table from the packetpath and to unlink it from the active table list.
In case of rmmod, userspace that is doing set/getsockopt for this table
will not be able to re-instantiate the table:
 1. The larval table has been removed already
 2. existing instantiated table is no longer on the xt pernet table list.

This adds the second stage helper:

unlink the table from the dying list, free the hook ops (if any) and do
the audit notification.  It replaces xt_unregister_table().

Fixes: fdacd57c79 ("netfilter: x_tables: never register tables by default")
Reported-by: Tristan Madani <tristan@talencesecurity.com>
Reviewed-by: Tristan Madani <tristan@talencesecurity.com>
Closes: https://lore.kernel.org/netfilter-devel/20260429175613.1459342-1-tristmd@gmail.com/
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2026-05-08 01:30:16 +02:00
..
2026-04-07 08:22:24 -06:00
2026-04-16 07:03:40 -07:00
2026-04-07 17:38:07 +02:00
2026-04-05 13:53:28 -07:00
2026-04-06 11:39:54 +02:00
2026-04-05 13:53:10 -07:00
2026-04-20 11:35:17 -07:00
2026-04-13 08:39:51 -07:00
2026-04-06 09:06:39 +02:00