Re: [PATCH -stable,5.10.x 0/3] Netfilter fixes for -stable

[Pablo Neira Ayuso <pablo@netfilter.org>]

On Mon, Apr 08, 2024 at 11:20:37PM +0200, Pablo Neira Ayuso wrote:
> Hi Greg, Sasha,
> 
> This batch contains a backport for recent fixes already upstream for 5.10.x,
> to add them on top of your enqueued patches:
> 
> 994209ddf4f4 ("netfilter: nf_tables: reject new basechain after table flag update")
> 24cea9677025 ("netfilter: nf_tables: flush pending destroy work before exit_net release")
> a45e6889575c ("netfilter: nf_tables: release batch on table validation from abort path")
> 0d459e2ffb54 ("netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path")
> 1bc83a019bbe ("netfilter: nf_tables: discard table flag update with pending basechain deletion")

Side note: this batch indeed contains 5 patches, subject should be:

        [PATCH -stable,5.10.x 0/5] Netfilter fixes for -stable

I can resend if needed.

> Please, apply, thanks.
> 
> Pablo Neira Ayuso (5):
>   netfilter: nf_tables: reject new basechain after table flag update
>   netfilter: nf_tables: flush pending destroy work before exit_net release
>   netfilter: nf_tables: release batch on table validation from abort path
>   netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
>   netfilter: nf_tables: discard table flag update with pending basechain deletion
> 
>  net/netfilter/nf_tables_api.c | 51 ++++++++++++++++++++++++++++-------
>  1 file changed, 41 insertions(+), 10 deletions(-)
> 
> -- 
> 2.30.2
> 
>