: Net namespace leak when reading /proc/net/xxx_tables_names.
Subsystems (3)
PATCH 1/1 : Net namespace leak when reading /proc/net/xxx_tables_names.
The seq_open_net() call should be accompanied with seq_release_net() one.
Signed-off-by Pavel Emelyanov <[email protected]>
---
net/netfilter/x_tables.c +1 -1
@@ -787,7 +787,7 @@ static const struct file_operations xt_table_ops = { .open = xt_table_open, .read = seq_read, .llseek = seq_lseek, - .release = seq_release, + .release = seq_release_net, };static void *xt_match_seq_start (struct seq_file *seq,loff_t *pos)
Patrick McHardy
AppliedQuoted 3 lines · Pavel Emelyanov
The
seq_open_net()call should be accompanied withseq_release_net()one.Signed-off-by Pavel Emelyanov <[email protected]>
Applied, thanks.