APPLIED [OEM-6.1] Re: [SRU Jammy,OEM-6.1,Lunar,Mantic 0/1] CVE-2024-0193

[Timo Aaltonen]

Thadeu Lima de Souza Cascardo kirjoitti 4.1.2024 klo 21.42:
> [Impact]
> A double deactivation of garbage collected netfilter set pipapo elements
> can lead to a use-after-free, allowing unprivileged users to escalage
> privileges when user namespaces are used.
> 
> [Test case]
> This was only built tested.
> 
> [Potential impact]
> nftables users would be affected.
> 
> Pablo Neira Ayuso (1):
>    netfilter: nf_tables: skip set commit for deleted/destroyed sets
> 
>   net/netfilter/nf_tables_api.c | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
> 

applied to oem-6.1-prep, thanks

-- 
t