Skip to contentSkip to conversation

netfilter: nf_nat: fix oops on netns removal

3.10.y-3.15.y Chris J Arges 2 participants 2 messages Jun 26, 2014 – Jun 27, 2014

Subsystems (2)
lore
Share & tools
lore
#0 lore raw

Hi,

Please include commit 945b2b2d259d1a4364a2799e80e8ff32f8c6ee6f in the netdev stable queue and any other appropriate stable trees. This fixes a race condition that can be triggered when cleaning up LXC containers that use NAT/netns. The patch has already received positive testing when backported to 3.13.y.

The patch cleanly cherry-picks from 3.10.y to 3.15.y.

Upstream bug:
https://bugzilla.kernel.org/show_bug.cgi?id=65191
Ubuntu bug:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1314274

Fixes c2d421e1718 ('netfilter: nf_nat: fix race when unloading protocol

modules')

This also potentially affects v3.9.y and other stable trees such as v3.8.y that have backported the above patch; however it is not a clean cherry-pick for those versions. I'll work on a patch in this case and send a separate email.

--chris j arges

#1 lore raw
Quoted 7 lines · Chris J Arges

Hi,

Please include commit 945b2b2d259d1a4364a2799e80e8ff32f8c6ee6f in the netdev stable queue and any other appropriate stable trees. This fixes a race condition that can be triggered when cleaning up LXC containers that use NAT/netns. The patch has already received positive testing when backported to 3.13.y.

Please wait, this is in my queue:

0006-netfilter-nf_nat-fix-oops-on-netns-removal.patch

I'll send it asap.