netfilter: nft_socket: fix sk refcount leaks
[ Upstream commit 8b26ff7af8c32cb4148b3e147c52f9e4c695209c ]
We must put 'sk' reference before returning.
BUG=b/371156341
TEST=presubmit
RELEASE_NOTE=Fixed CVE-2024-46855 in the Linux kernel.
cos-patch: security-moderate
Fixes: 039b1f4f24ec ("netfilter: nft_socket: fix erroneous socket assignment")
Change-Id: I748a9749bf46b5f42c0dcf9ff73add7ae48761d8
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Kernel CVE Triage Automation <cloud-image-kernel-cve-triage-automation@prod.google.com>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/82919
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Shuo Yang <gshuoy@google.com>
Reviewed-by: Anil Altinay <aaltinay@google.com>
1 file changed
