netfilter: conntrack: Fix data-races around ct mark
authorDaniel Xu <dxu@dxuuu.xyz>
Wed, 9 Nov 2022 19:39:07 +0000 (12:39 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 2 Dec 2022 16:40:00 +0000 (17:40 +0100)
commit5c97af75f53c626283afd8a800a4bd57614f761f
treed3fc1dc341ccae70273269283d7b4180891f9f1a
parent459332f8dbfb99d9fb95c0f37c7015d36687fc6d
netfilter: conntrack: Fix data-races around ct mark

[ Upstream commit 52d1aa8b8249ff477aaa38b6f74a8ced780d079c ]

nf_conn:mark can be read from and written to in parallel. Use
READ_ONCE()/WRITE_ONCE() for reads and writes to prevent unwanted
compiler optimizations.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Daniel Xu <dxu@dxuuu.xyz>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/core/flow_dissector.c
net/ipv4/netfilter/ipt_CLUSTERIP.c
net/netfilter/nf_conntrack_core.c
net/netfilter/nf_conntrack_netlink.c
net/netfilter/nf_conntrack_standalone.c
net/netfilter/nft_ct.c
net/netfilter/xt_connmark.c
net/openvswitch/conntrack.c
net/sched/act_connmark.c
net/sched/act_ct.c
net/sched/act_ctinfo.c