Re: [PATCH 6.6.y 0/2] netfilter: fix catchall element double-free

Hi Greg, Sasha,

On Tue, Nov 21, 2023 at 01:14:20PM +0100, Florian Westphal wrote:

Hello,

This series contains the backports of two related changes to fix removal of timed-out catchall elements.

As-is, removed element remains on the list and will be collected again.

The adjustments are needed because of missing commit 0e1ea651c971 ("netfilter: nf_tables: shrink memory consumption of set elements"), so we need to pass set_elem container struct instead of "elem_priv".

Please, also apply this series to -stable 5.15, 6.1 and 6.5.

This series apply cleanly to these -stable kernels, I have also tested this series on them.

Tested-by: Pablo Neira Ayuso pablo@netfilter.org

Thanks.