Re: [PATCH nf] netfilter: nf_tables: prevent nf_skb_duplicated corruption

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Sep 26, 2024 at 06:56:11PM +0000, Eric Dumazet wrote:
> syzbot found that nf_dup_ipv4() or nf_dup_ipv6() could write
> per-cpu variable nf_skb_duplicated in an unsafe way [1].
> 
> Disabling preemption as hinted by the splat is not enough,
> we have to disable soft interrupts as well.

Applied, thanks




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux