ACK: [SRU Jammy,OEM-6.1,Lunar,Mantic 0/2] CVE-2023-5197

[Tim Gardner]

On 9/27/23 7:19 AM, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
>   A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables
>   component can be exploited to achieve local privilege escalation. Addition
>   and removal of rules from chain bindings within the same transaction causes
>   leads to use-after-free.
> 
> [Backport]
> Fix commit applies cleanly on Mantic. On Lunar, there is a missing
> pre-requisite, which is already present in 5.15 and 6.1 kernels.
> 
> On those other kernels (6.2, 6.1 and 5.15), the fix requires a small
> conflict fixup due to an extra unrelated hunk added on later kernels.
> 
> [Potential regression]
> nftables users are affected.
> 
> Pablo Neira Ayuso (2):
>    netfilter: nf_tables: skip bound chain in netns release path
>    netfilter: nf_tables: disallow rule removal from chain binding
> 
>   net/netfilter/nf_tables_api.c | 19 +++++++++++++++----
>   1 file changed, 15 insertions(+), 4 deletions(-)
> 
Acked-by: Tim Gardner <tim.gardner at canonical.com>
-- 
-----------
Tim Gardner
Canonical, Inc