[quantal,sru,pull-request] fix for lp#1256988

Message ID 52AB69D8.9080709@canonical.com
State New
Headers show


git://kernel.ubuntu.com/arges/ubuntu-quantal.git lp1256988


Chris J Arges Dec. 13, 2013, 8:11 p.m.
BugLink: http://bugs.launchpad.net/bugs/1256988

SRU Justification:

* When restoring an iptable in a network namespace, if the network
namespace is deleted the kernel crashes.

[Test Case]
$ sudo -s
# ip netns add foobar
# ip netns exec foobar iptables -A OUTPUT -m recent --rcheck --rsource
# ip netns del foobar

[Regression Potential]
* The following patches fix the issue:

In addition this patch is required to fix a potential regression
introduced by the original fix:

Two are upstream linux patches, the last it still in the netfilter
upstream tree.


The following changes since commit e2f6a961ee77276feed33fd5d64effff490e8608:

  UBUNTU: Ubuntu-3.5.0-45.68 (2013-12-02 13:53:32 -0600)

are available in the git repository at:

  git://kernel.ubuntu.com/arges/ubuntu-quantal.git lp1256988

for you to fetch changes up to 7c83faf748cf7565dd841c91340b2c7222ef031e:

  netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
(2013-12-13 13:55:33 -0600)

Sergey Popovich (1):
      netfilter: xt_hashlimit: fix proc entry leak in netns destroy path

Vitaly E. Lavrov (2):
      netfilter: xt_recent: fix namespace destroy path
      netfilter: xt_hashlimit: fix namespace destroy path

 net/netfilter/xt_hashlimit.c |   34 +++++++++++++++++++++++++++-------
 net/netfilter/xt_recent.c    |   20 ++++++++++++++++----
 2 files changed, 43 insertions(+), 11 deletions(-)


Tim Gardner Dec. 13, 2013, 8:52 p.m. | #1

Seth Forshee Dec. 13, 2013, 9:10 p.m. | #2

Tim Gardner Dec. 14, 2013, 1:28 p.m. | #3