Florian Westphal 29e3880109 netfilter: nf_tables: fix use-after-free when deleting compat expressions ... nft_compat ops do not have static storage duration, unlike all other expressions. When nf_tables_expr_destroy() returns, expr->ops might have been free'd already, so we need to store next address before calling expression destructor. For same reason, we can't deref match pointer after nft_xt_put(). This can be easily reproduced by adding msleep() before nft_match_destroy() returns. Fixes: 0ca743a559 ("netfilter: nf_tables: add compatibility layer for x_tables") Reported-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2018-11-13 09:57:33 +01:00
..
6lowpan
9p	Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-11-03 10:35:52 -07:00
802
8021q	netpoll: allow cleanup to be synchronous	2018-10-19 17:01:43 -07:00
appletalk
atm	Revert "net: simplify sock_poll_wait"	2018-10-23 10:57:06 -07:00
ax25
batman-adv
bluetooth	Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-11-01 19:58:52 -07:00
bpf	bpf: add tests for direct packet access from CGROUP_SKB	2018-10-19 13:49:34 -07:00
bpfilter	net: bpfilter: Set user mode helper's command line	2018-10-22 19:37:36 -07:00
bridge	net: bridge: remove ipv6 zero address check in mcast queries	2018-10-28 19:18:09 -07:00
caif	Revert "net: simplify sock_poll_wait"	2018-10-23 10:57:06 -07:00
can
ceph	Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-11-01 19:58:52 -07:00
core	flow_dissector: do not dissect l4 ports for fragments	2018-11-09 20:01:21 -08:00
dcb
dccp	Revert "net: simplify sock_poll_wait"	2018-10-23 10:57:06 -07:00
decnet
dns_resolver
dsa	net: dsa: legacy: simplify getting .driver_data	2018-10-22 19:49:04 -07:00
ethernet
hsr
ieee802154
ife
ipv4	inet: frags: better deal with smp races	2018-11-08 18:40:30 -08:00
ipv6	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf	2018-11-05 17:19:25 -08:00
iucv	Revert "net: simplify sock_poll_wait"	2018-10-23 10:57:06 -07:00
kcm
key
l2tp
l3mdev
lapb
llc	llc: do not use sk_eat_skb()	2018-10-22 19:59:20 -07:00
mac80211	mac80211: implement ieee80211_tx_rate_update to update rate	2018-10-12 13:05:40 +02:00
mac802154
mpls	net/mpls: Handle kernel side filtering of route dumps	2018-10-16 00:14:07 -07:00
ncsi	net/ncsi: Add NCSI Broadcom OEM command	2018-10-17 22:14:54 -07:00
netfilter	netfilter: nf_tables: fix use-after-free when deleting compat expressions	2018-11-13 09:57:33 +01:00
netlabel
netlink	netlink: Add answer_flags to netlink_callback	2018-10-16 00:13:12 -07:00
netrom
nfc	Merge branch 'work.tty-ioctl' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-10-24 14:43:41 +01:00
nsh
openvswitch	openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS	2018-11-03 19:28:44 -07:00
packet
phonet
psample
qrtr
rds	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2018-10-12 21:38:46 -07:00
rfkill
rose
rxrpc	rxrpc: Fix lockup due to no error backoff after ack transmit error	2018-11-02 23:59:26 -07:00
sched	act_mirred: clear skb->tstamp on redirect	2018-11-11 10:21:31 -08:00
sctp	sctp: define SCTP_SS_DEFAULT for Stream schedulers	2018-11-03 19:40:29 -07:00
smc	Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-11-01 19:58:52 -07:00
strparser	bpf, sockmap: convert to generic sk_msg interface	2018-10-15 12:23:19 -07:00
sunrpc	NFS client bugfixes for Linux 4.20	2018-11-04 08:20:09 -08:00
switchdev
tipc	tipc: fix link re-establish failure	2018-11-11 10:03:38 -08:00
tls	Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-11-01 19:58:52 -07:00
unix	Revert "net: simplify sock_poll_wait"	2018-10-23 10:57:06 -07:00
vmw_vsock
wimax
wireless	nl80211: Add per peer statistics to compute FCS error rate	2018-10-12 12:56:34 +02:00
x25
xdp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2018-10-19 11:03:06 -07:00
xfrm	Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-11-03 18:25:17 -07:00
compat.c
Kconfig	bpf, sockmap: convert to generic sk_msg interface	2018-10-15 12:23:19 -07:00
Makefile
socket.c	Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-11-01 19:58:52 -07:00
sysctl_net.c