Skip to content

Commit 8635bed

Browse files
committed
Merge: CVE-2024-45018: netfilter: flowtable: initialise extack before use
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/5174 JIRA: https://issues.redhat.com/browse/RHEL-58544 CVE: CVE-2024-45018 ``` netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload. Fixes: c29f74e ("netfilter: nf_flow_table: hardware offload support") Signed-off-by: Donald Hunter <[email protected]> Reviewed-by: Simon Horman <[email protected]> Signed-off-by: Pablo Neira Ayuso <[email protected]> (cherry picked from commit e976713) ``` Signed-off-by: CKI Backport Bot <[email protected]> Approved-by: Florian Westphal <[email protected]> Approved-by: Antoine Tenart <[email protected]> Approved-by: CKI KWF Bot <[email protected]> Merged-by: Rado Vrbovsky <[email protected]>
2 parents 567b583 + c079c0b commit 8635bed

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

net/netfilter/nf_flow_table_offload.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -834,8 +834,8 @@ static int nf_flow_offload_tuple(struct nf_flowtable *flowtable,
834834
struct list_head *block_cb_list)
835835
{
836836
struct flow_cls_offload cls_flow = {};
837+
struct netlink_ext_ack extack = {};
837838
struct flow_block_cb *block_cb;
838-
struct netlink_ext_ack extack;
839839
__be16 proto = ETH_P_ALL;
840840
int err, i = 0;
841841

0 commit comments

Comments
 (0)