)]}'
{
  "commit": "8956dbfffd3a5ead6eec995202545aa67f745a74",
  "tree": "3dae5f006bdb65c08694dc0d9fb580c4660002fe",
  "parents": [
    "3051720a253313b7bb53662c29af89d67a5ad6c0"
  ],
  "author": {
    "name": "Pablo Neira Ayuso",
    "email": "pablo@netfilter.org",
    "time": "Mon Jun 26 00:42:18 2023 +0200"
  },
  "committer": {
    "name": "Robert Kolchmeyer",
    "email": "rkolchmeyer@google.com",
    "time": "Tue Jul 11 18:35:53 2023 +0000"
  },
  "message": "netfilter: nf_tables: unbind non-anonymous set if rule construction fails\n\n[ Upstream commit 3e70489721b6c870252c9082c496703677240f53 ]\n\nOtherwise a dangling reference to a rule object that is gone remains\nin the set binding list.\n\nBUG\u003db/290339378\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2023-3390 in the Linux kernel.\n\ncos-patch: security-high\nFixes: 26b5a5712eb8 (\"netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain\")\nChange-Id: I8f5009e2dc78d4253e993118f28cbcb20cc76687\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n(cherry picked from commit 3e70489721b6c870252c9082c496703677240f53)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/51889\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "826bd961d90c13b5a524f6b6772ede0f555c3a99",
      "old_mode": 33188,
      "old_path": "net/netfilter/nf_tables_api.c",
      "new_id": "62f199954df65eb2e58c8a1332d3913c6d8d452d",
      "new_mode": 33188,
      "new_path": "net/netfilter/nf_tables_api.c"
    }
  ]
}