Subject: Re: [PATCH 6.6.y] netfilter: nf_tables: unconditionally bump set->nelems before insertion

From: Sasha Levin <[email-masked]>
Date: Tue, 19 May 2026 20:54:16 -0400

On Tue, May 19, 2026 at 03:55:18PM +0800, Li hongliang wrote:
> From: Pablo Neira Ayuso <[email-masked]>
>
> [ Upstream commit def602e498a4f951da95c95b1b8ce8ae68aa733a ]
>
> In case that the set is full, a new element gets published then removed
> without waiting for the RCU grace period, while RCU reader can be
> walking over it already.
[...]
> [ Minor conflict resolved. ]
> Signed-off-by: Li hongliang <[email-masked]>

Queued for 6.6, thanks.

Note: 6.1, 5.15 and 5.10 also contain the buggy Fixes: parent
(35d0ac9070ef) and would benefit from the same fix. A hand-crafted
backport for those branches would be welcome if you have the cycles.

--
Thanks,
Sasha