]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit
netfilter: nf_tables: do not allow to delete table with owner by handle
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 22 Jun 2021 10:10:49 +0000 (12:10 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 22 Jun 2021 10:15:05 +0000 (12:15 +0200)
commite31f072ffab0397a328b31a9589dcf9733dc9c72
tree5fb44498a930a67fd7706357c70cf8828972b72a
parent534799097a777e82910f77a4f9d289c815a9a64e
netfilter: nf_tables: do not allow to delete table with owner by handle

nft_table_lookup_byhandle() also needs to validate the netlink PortID
owner when deleting a table by handle.

Fixes: 6001a930ce03 ("netfilter: nftables: introduce table ownership")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c