Hi Pablo,
Please apply the next patch against your nf tree so that it'll get
applied to older stable branches too. (The patch depends on another one.)
- Lion Ackermann reported that there's a race condition between namespace cleanup
and the garbage collection of the list:set type. The patch resolves the issue
with other minor issues as well.
Best regards,
Jozsef
The following changes since commit ece92825a1fa31cf704a5898fd599daab5cb6573:
netfilter: nft_fib: allow from forward/input without iif selector (2024-05-23 17:56:31 +0200)
are available in the Git repository at:
git://blackhole.kfki.hu/nf 9bb49a1f0354a2e
for you to fetch changes up to 9bb49a1f0354a2ed2854af40d7051188b9b85837:
netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (2024-06-04 09:23:46 +0200)
----------------------------------------------------------------
Jozsef Kadlecsik (1):
netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
net/netfilter/ipset/ip_set_core.c | 81 ++++++++++++++++++++---------------
net/netfilter/ipset/ip_set_list_set.c | 30 ++++++-------
2 files changed, 60 insertions(+), 51 deletions(-)
