Attachment 14019 Details for Bug 32296 – CVE-2023-42756 patch

[patch] CVE-2023-42756 patch

ip_set-CVE-2023-42756.patch (text/plain), 887 bytes, created by christian barranco on 2023-09-29 19:35:14 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: christian barranco

Created: 2023-09-29 19:35:14 CEST

Size: 887 bytes

patch

obsolete

diff --git a/net/netfilter/ipset/ip_set_core.c b/net/netfilter/ipset/ip_set_core.c
index e564b51742611..35d2f9c9ada02 100644
--- a/net/netfilter/ipset/ip_set_core.c
+++ b/net/netfilter/ipset/ip_set_core.c
@@ -683,6 +683,14 @@ __ip_set_put(struct ip_set *set)
  * a separate reference counter
  */
 static void
+__ip_set_get_netlink(struct ip_set *set)
+{
+	write_lock_bh(&ip_set_ref_lock);
+	set->ref_netlink++;
+	write_unlock_bh(&ip_set_ref_lock);
+}
+
+static void
 __ip_set_put_netlink(struct ip_set *set)
 {
 	write_lock_bh(&ip_set_ref_lock);
@@ -1693,11 +1701,11 @@ call_ad(struct net *net, struct sock *ctnl, struct sk_buff *skb,

 	do {
 		if (retried) {
-			__ip_set_get(set);
+			__ip_set_get_netlink(set);
 			nfnl_unlock(NFNL_SUBSYS_IPSET);
 			cond_resched();
 			nfnl_lock(NFNL_SUBSYS_IPSET);
-			__ip_set_put(set);
+			__ip_set_put_netlink(set);
 		}

 		ip_set_lock(set);

Actions: View | Diff

Attachments on bug 32296: 14010 | 14011 | 14019 | 14020