netfilter: nf_tables: validate registers coming from userspace.
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 17 Mar 2022 10:59:26 +0000 (11:59 +0100)
committerSalvatore Bonaccorso <carnil@debian.org>
Thu, 27 Jul 2023 22:17:15 +0000 (23:17 +0100)
commit270ae3d192cf1b13371175998c413ebf1c3deafb
treea3d46f99d2a62534a133eb36d78795f912781f16
parentaf347c5ff277fce2b780d03765058b1beac94645
netfilter: nf_tables: validate registers coming from userspace.

Origin: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit?id=9e8d927cfa564e5a00cd287bd66fac6d45f0af39

commit 6e1acfa387b9ff82cfc7db8cc3b6959221a95851 upstream.

Bail out in case userspace uses unsupported registers.

Fixes: 49499c3e6e18 ("netfilter: nf_tables: switch registers to 32 bit addressing")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name netfilter-nf_tables-validate-registers-coming-from-u.patch
net/netfilter/nf_tables_api.c