Skip to content

Draft: netfilter: nf_tables: unbind non-anonymous set if rule construction fails

Phil Sutter requested to merge psutter1/kernel-ark:kernel-ark/bz2216972 into fedora-6.3

Otherwise a dangling reference to a rule object that is gone remains in the set binding list.

Fixes: 26b5a571 ("netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain") Signed-off-by: Pablo Neira Ayuso pablo@netfilter.org (cherry picked from commit 3e704897)

Merge request reports