]> git.hungrycats.org Git - linux/commit
projects / linux / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0e5ed3b) | patch
netfilter: nf_tables: move hardware offload step after building the chain blob
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 13 Aug 2026 00:16:02 +0000 (02:16 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 14 Sep 2026 11:36:14 +0000 (13:36 +0200)
commitd5497644329d3a01e951aba76561bbd883ff6b0c
treea1b58134321995a91c33317a56aba583e0b2a51ftree | snapshot
parent0e5ed3b98d1d8d251acfdccfeaa607453ad12954commit | diff
netfilter: nf_tables: move hardware offload step after building the chain blob

[ Upstream commit b1881d362e1924b66f6016c3efd28807032b41bf ]

Allocate the chain blob before the ruleset offload to reduce chances of
entering an inconsistent state where the offloaded ruleset in the nic
and the software ruleset differ.

Fixes: c9626a2cbdb2 ("netfilter: nf_tables: add hardware offload support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c diff | blob | history
Linux kernels and configurations used by Zygo.