diff options
| author | Phil Sutter <phil@nwl.cc> | 2023-12-05 23:58:12 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-12-06 19:52:15 +0300 |
| commit | 7ae836a3d630e146b732fe8ef7d86b243748751f (patch) | |
| tree | e7de314a4b70b89d256168aa8fb078de3c7117aa /net/netfilter/xt_HL.c | |
| parent | f6e1532a2697b81da00bfb184e99d15e01e9d98c (diff) | |
| download | linux-7ae836a3d630e146b732fe8ef7d86b243748751f.tar.xz | |
netfilter: xt_owner: Fix for unsafe access of sk->sk_socket
A concurrently running sock_orphan() may NULL the sk_socket pointer in
between check and deref. Follow other users (like nft_meta.c for
instance) and acquire sk_callback_lock before dereferencing sk_socket.
Fixes: 0265ab44bacc ("[NETFILTER]: merge ipt_owner/ip6t_owner in xt_owner")
Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/xt_HL.c')
0 files changed, 0 insertions, 0 deletions