ACK: [SRU Jammy,OEM-6.1,Lunar,Mantic 0/1] CVE-2024-0193

[Roxana Nicolescu]

On 04/01/2024 20:42, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> A double deactivation of garbage collected netfilter set pipapo elements
> can lead to a use-after-free, allowing unprivileged users to escalage
> privileges when user namespaces are used.
>
> [Test case]
> This was only built tested.
>
> [Potential impact]
> nftables users would be affected.
>
> Pablo Neira Ayuso (1):
>    netfilter: nf_tables: skip set commit for deleted/destroyed sets
>
>   net/netfilter/nf_tables_api.c | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>
Acked-by: Roxana Nicolescu <roxana.nicolescu at canonical.com>