Re: Patch "netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type" has been added to the 6.9-stable tree

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> · Sun, 23 Jun 2024 23:57:53 +0200

Hi Greg,

On Wed, Jun 19, 2024 at 12:57:15PM +0200, Greg KH wrote:
> On Mon, Jun 17, 2024 at 03:04:50PM +0200, Pablo Neira Ayuso wrote:
> > Hi Sasha,
> > 
> > This fix requires a follow up to silence a RCU suspicious usage warning.
> > 
> > Please, hold on until end of the week with this.
> > 
> > I will get back to you with a reminder if it helps.
> 
> Dropped from all queues, please resend it when you feel it is ready to
> be added.

commit 8ecd06277a7664f4ef018abae3abd3451d64e7a6
Author: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
Date:   Mon Jun 17 11:18:15 2024 +0200

    netfilter: ipset: Fix suspicious rcu_dereference_protected()

is now upstream, which provides the incremental fix for:

commit 4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10
Author: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
Date:   Tue Jun 4 15:58:03 2024 +0200

    netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type

These two patches can now be queued up to -stable.

Thanks