Pablo Neira Ayuso cf5fb87fcd netfilter: nf_tables: reject duplicate device on updates ... A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving unregistered the hook of the duplicated device. Check if a duplicated device exists in the transaction batch, bail out with EEXIST in such case. WARNING is hit when unregistering the hook: [49042.221275] WARNING: CPU: 4 PID: 8425 at net/netfilter/core.c:340 nf_hook_entry_head+0xaa/0x150 [49042.221375] CPU: 4 UID: 0 PID: 8425 Comm: nft Tainted: G S 6.16.0+ #170 PREEMPT(full) [...] [49042.221382] RIP: 0010:nf_hook_entry_head+0xaa/0x150 Fixes: 78d9f48f7f ("netfilter: nf_tables: add devices to existing flowtable") Fixes: b9703ed44f ("netfilter: nf_tables: support for adding new devices to an existing netdev chain") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Florian Westphal <fw@strlen.de>		2025-08-13 08:34:55 +02:00
..
6lowpan	net: replace ND_PRINTK with dynamic debug	2025-07-10 15:27:32 -07:00
9p	netfs: Fix the request's work item to not require a ref	2025-05-21 14:35:20 +02:00
802	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
8021q	net: s/dev_close_many/netif_close_many/	2025-07-18 17:27:47 -07:00
appletalk	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-07-24 11:10:46 -07:00
atm	atm: clip: Fix NULL pointer dereference in vcc_sendmsg()	2025-07-09 19:09:36 -07:00
ax25	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
batman-adv	This cleanup patchset includes the following patches:	2025-07-11 17:50:27 -07:00
bluetooth	Networking changes for 6.17.	2025-07-30 08:58:55 -07:00
bpf	bpf: Add attach_type field to bpf_link	2025-07-11 10:51:55 -07:00
bridge	netfilter: add back NETFILTER_XTABLES dependencies	2025-08-07 13:19:25 +02:00
caif	caif: reduce stack size, again	2025-06-23 16:58:43 -07:00
can	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-06-12 10:09:10 -07:00
ceph	libceph: Rename hmac_sha256() to ceph_hmac_sha256()	2025-07-04 10:18:52 -07:00
core	net: prevent deadlocks when enabling NAPIs with mixed kthread config	2025-08-12 14:43:05 +02:00
dcb	dcb: Use rtnl_register_many().	2024-10-15 18:52:26 -07:00
devlink	devlink: Fix excessive stack usage in rate TC bandwidth parsing	2025-07-23 17:07:35 -07:00
dns_resolver	Networking changes for 6.8.	2024-01-11 10:07:29 -08:00
dsa	net: s/dev_close_many/netif_close_many/	2025-07-18 17:27:47 -07:00
ethernet	netkit: Fix pkt_type override upon netkit pass verdict	2024-05-25 10:48:57 -07:00
ethtool	ethtool: rss: support removing contexts via Netlink	2025-07-21 18:21:19 -07:00
handshake	net/handshake: Add new parameter 'HANDSHAKE_A_ACCEPT_KEYRING'	2025-07-08 15:31:44 +02:00
hsr	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
ieee802154	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
ife	net: sched: ife: fix potential use-after-free	2023-12-15 10:50:18 +00:00
ipv4	ipsec-2025-08-11	2025-08-12 15:01:09 +02:00
ipv6	ipsec-2025-08-11	2025-08-12 15:01:09 +02:00
iucv	s390/drivers: Explicitly include <linux/export.h>	2025-06-17 18:18:02 +02:00
kcm	kcm: Fix splice support	2025-07-30 18:01:26 -07:00
key	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-07-24 11:10:46 -07:00
l2tp	net: annotate races around sk->sk_uid	2025-06-23 17:04:03 -07:00
l3mdev	net: fib_rules: Fix iif / oif matching on L3 master device	2025-04-15 17:54:56 -07:00
lapb	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
llc	net: make sk->sk_rcvtimeo lockless	2025-06-23 17:05:12 -07:00
mac80211	wifi: mac80211: fix WARN_ON for monitor mode on some devices	2025-07-23 12:29:07 +02:00
mac802154	mac802154: Switch to use hrtimer_setup()	2025-02-18 10:35:44 +01:00
mctp	net: mctp: Add bind lookup test	2025-07-15 12:08:39 +02:00
mpls	net: s/dev_get_flags/netif_get_flags/	2025-07-18 17:27:47 -07:00
mptcp	mptcp: remove pr_fallback()	2025-07-25 11:29:04 -07:00
ncsi	net: ncsi: Fix buffer overflow in fetching version id	2025-06-12 18:21:59 -07:00
netfilter	netfilter: nf_tables: reject duplicate device on updates	2025-08-13 08:34:55 +02:00
netlabel	calipso: unlock rcu before returning -EAFNOSUPPORT	2025-06-05 08:03:38 -07:00
netlink	netlink: avoid infinite retry looping in netlink_unicast()	2025-07-30 19:16:49 -07:00
netrom	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
nfc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-06-19 13:00:24 -07:00
nsh	nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().	2024-04-26 12:20:01 +02:00
openvswitch	net: openvswitch: allow providing upcall pid for the 'execute' command	2025-07-07 14:30:39 -07:00
packet	net/packet: fix a race in packet_set_ring() and packet_notifier()	2025-08-04 17:21:27 -07:00
phonet	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-07-17 11:00:33 -07:00
psample	psample: adjust size if rate_as_probability is set	2024-12-18 19:23:04 -08:00
qrtr	net: qrtr: Update packets cloning when broadcasting	2024-09-24 10:48:16 +02:00
rds	don't open-code kernel_accept() in rds_tcp_accept_one()	2025-07-15 16:19:54 -07:00
rfkill	net: rfkill: gpio: allow booting in blocked state	2025-02-11 11:55:55 +01:00
rose	net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC	2025-07-18 16:59:05 -07:00
rxrpc	rxrpc: Fix to use conn aborts for conn-wide failures	2025-07-17 07:50:48 -07:00
sched	net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing	2025-08-04 17:22:20 -07:00
sctp	sctp: linearize cloned gso packets in sctp_rcv	2025-08-08 13:08:06 -07:00
shaper	net: add netdev_lock() / netdev_unlock() helpers	2025-01-15 19:13:33 -08:00
smc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-07-17 11:00:33 -07:00
strparser	net: make sk->sk_rcvtimeo lockless	2025-06-23 17:05:12 -07:00
sunrpc	Massage rpc_pipefs to use saner primitives and clean up the	2025-07-28 09:56:09 -07:00
switchdev	net: switchdev: Convert blocking notification chain to a raw one	2025-03-11 11:30:28 +01:00
tipc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-07-10 10:10:49 -07:00
tls	tls: handle data disappearing from under the TLS ULP	2025-08-12 18:59:05 -07:00
unix	Networking changes for 6.17.	2025-07-30 08:58:55 -07:00
vmw_vsock	vsock: Do not allow binding to VMADDR_PORT_ANY	2025-08-08 12:55:00 -07:00
wireless	Another wireless update:	2025-07-24 17:25:42 -07:00
x25	net/x25: Remove unused x25_terminate_link()	2025-07-14 17:19:13 -07:00
xdp	net: xsk: introduce XDP_MAX_TX_SKB_BUDGET setsockopt	2025-07-10 14:48:29 +02:00
xfrm	xfrm: bring back device check in validate_xmit_xfrm	2025-08-07 08:07:01 +02:00
compat.c	file: stop exposing receive_fd_user()	2023-12-12 14:24:14 +01:00
devres.c	net: devres: Correct a grammatical error	2021-06-11 12:55:28 -07:00
Kconfig	net: Kconfig: add endif/endmenu comments	2025-07-22 18:17:23 -07:00
Kconfig.debug	rtnetlink: Add per-netns RTNL.	2024-10-08 15:16:59 +02:00
Makefile	net: Retire DCCP socket.	2025-04-11 18:58:10 -07:00
socket.c	net: annotate races around sk->sk_uid	2025-06-23 17:04:03 -07:00
sysctl_net.c	sysctl: Remove check for sentinel element in ctl_table arrays	2024-06-13 10:50:52 +02:00