[pkg-netfilter-team] Bug#914429: nftables: Delete and Flush lead to device or resource busy with segmentation fault

Arturo Borrero Gonzalez arturo at debian.org
Fri Nov 23 10:59:29 GMT 2018


Control: severity -1 normal
Control: reassign -1 linux
Control: fixed -1 4.18.20-1

On 11/23/18 11:32 AM, Eike Lohmann wrote:
> # nft delete chain filter C_TestChain
> Error: Could not process rule: Device or resource busy
> delete chain filter C_TestChain
> 

This is not a bug. This means that the C_TestChain chain is referenced
by other objects within the ruleset, thus you can't delete it.

Please, check your ruleset.

> # nft flush ruleset
> Segmentation fault
> 

This is a kernel error which leads the userspace application to crash.

Is fixed by this linux kernel patch:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7acfda539c0b9636a58bfee56abfb3aeee806d96

This should be included in linux 4.18.20-1.

Thanks for reporting!



More information about the pkg-netfilter-team mailing list