ACK: [SRU Jammy,OEM-6.1,Lunar,Mantic 0/2] CVE-2023-5197

[Roxana Nicolescu]

On 27/09/2023 15:19, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
>   A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables
>   component can be exploited to achieve local privilege escalation. Addition
>   and removal of rules from chain bindings within the same transaction causes
>   leads to use-after-free.
>
> [Backport]
> Fix commit applies cleanly on Mantic. On Lunar, there is a missing
> pre-requisite, which is already present in 5.15 and 6.1 kernels.
>
> On those other kernels (6.2, 6.1 and 5.15), the fix requires a small
> conflict fixup due to an extra unrelated hunk added on later kernels.
>
> [Potential regression]
> nftables users are affected.
>
> Pablo Neira Ayuso (2):
>    netfilter: nf_tables: skip bound chain in netns release path
>    netfilter: nf_tables: disallow rule removal from chain binding
>
>   net/netfilter/nf_tables_api.c | 19 +++++++++++++++----
>   1 file changed, 15 insertions(+), 4 deletions(-)
>
Acked-by: Roxana Nicolescu <roxana.nicolescu at canonical.com>