]> exis.tech > repos - linux.git/commit
netfilter: nf_tables_offload: drop device refcount on error
authorFlorian Westphal <fw@strlen.de>
Fri, 5 Jun 2026 11:47:12 +0000 (13:47 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 10 Jun 2026 15:58:29 +0000 (17:58 +0200)
commitefc542561729a2859397dad51bda1fe41262beb1
tree2bb16a7ee4276bb9c7d2905291e42b5cee73b3c6
parentccb9fd4b87538ccf19ccff78ee26700526d94867
netfilter: nf_tables_offload: drop device refcount on error

Reported by sashiko:
If nft_flow_action_entry_next() returns NULL, dev reference leaks.

Fixes: c6f85577584b ("netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it")
Reported-by: Juri Lelli <juri.lelli@redhat.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_dup_netdev.c