Re: [PATCH net] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.netfilter-devel |
|---|---|
| Message-ID | <178597560839.575509.1356511922096738928.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Tue, 4 Aug 2026 09:33:28 +0000 you wrote: > Incoming skbs passing through netfilter flowtable offload hooks (or XFRM > offload path) might already carry a ref-counted dst_entry assigned during > earlier RX or routing steps. > > Calling skb_dst_set_noref() when skb already holds a ref-counted dst > overwrites skb->_skb_refdst, leaking the previous dst_entry reference > count and triggering a DEBUG_NET_WARN_ON_ONCE assertion in > skb_dst_check_unset(): > > [...] Here is the summary with links: - [net] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() https://git.kernel.org/netdev/net/c/8aecf0bbcc72 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html