Subject: Re: [PATCH net] ila: call nf_unregister_net_hooks() sooner

From: Florian Westphal <[email-masked]>
Date: Wed, 4 Sep 2024 19:38:51 +0200

Eric Dumazet <[email-masked]> wrote:
> syzbot found an use-after-free Read in ila_nf_input [1]
> 
> Issue here is that ila_xlat_exit_net() frees the rhashtable,
> then call nf_unregister_net_hooks().
> 
> It should be done in the reverse way, with a synchronize_rcu().
> 
> This is a good match for a pre_exit() method.

Indeed, thanks Eric.

Reviewed-by: Florian Westphal <[email-masked]>