nf_tables_expressions and nf_tables_objects lists can be concurrent between type lookup and module unloading process. But there is not any protection in type lookup process. Therefore, there is pertential data-race of the lists entry. Use rcu lock to enhance protection of the lists. Ziyang Xuan (2): netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() net/netfilter/nf_tables_api.c | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) -- 2.25.1
