Skip to content
Commit 7dc3b2e4 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by Todd Kjos
Browse files

UPSTREAM: netfilter: nf_tables: check if catch-all set element is active in next generation



commit b1db244f upstream.

When deactivating the catch-all set element, check the state in the next
generation that represents this transaction.

This bug uncovered after the recent removal of the element busy mark
a2dd0233 ("netfilter: nf_tables: remove busy mark and gc batch API").

Bug: 323034444
Fixes: aaa31047 ("netfilter: nftables: add catch-all set element support")
Cc: stable@vger.kernel.org
Reported-by: default avatarlonial con <kongln9170@gmail.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit a372f1d0)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I40ac92a33db48a2709079d27d7d529946ba297c7
parent 8d4d76a2
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment