ACK: [SRU Jammy,OEM-5.17,OEM-6.0,OEM-6.1,Lunar 0/1] CVE-2023-4004

Cengiz Can cengiz.can at canonical.com
Thu Aug 3 00:35:38 UTC 2023


On Wed, 2023-08-02 at 18:02 -0300, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> Unprivileged users can exploit a use-after-free in the pipapo
> nftables
> set by using unprivileged user namespaces.
> 
> [Potential regression]
> nftables users may regress.
> 
> Florian Westphal (1):
>   netfilter: nft_set_pipapo: fix improper element removal

Acked-by: Cengiz Can <cengiz.can at canonical.com>

> 
>  net/netfilter/nft_set_pipapo.c | 6 +++++-
>  1 file changed, 5 insertions(+), 1 deletion(-)
> 
> -- 
> 2.34.1
> 
> 




More information about the kernel-team mailing list