[PATCH linux] netfilter: conntrack: Add missing modification about data-race around ct->timeout
From: Chenguang Zhao
Date: Mon Nov 17 2025 - 03:58:47 EST
Add missing modification about data-race around ct->timeout
Signed-off-by: Chenguang Zhao <zhaochenguang@xxxxxxxxxx>
Fixes: 802a7dc5cf1b ("netfilter: conntrack: annotate data-races around ct->timeout")
---
net/netfilter/nf_conntrack_core.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/net/netfilter/nf_conntrack_core.c b/net/netfilter/nf_conntrack_core.c
index 344f88295976..0b26d53f3b65 100644
--- a/net/netfilter/nf_conntrack_core.c
+++ b/net/netfilter/nf_conntrack_core.c
@@ -1297,7 +1297,7 @@ __nf_conntrack_confirm(struct sk_buff *skb)
/* Timeout is relative to confirmation time, not original
setting time, otherwise we'd get timer wrap in
weird delay cases. */
- ct->timeout += nfct_time_stamp;
+ WRITE_ONCE(ct->timeout, ct->timeout + nfct_time_stamp);
__nf_conntrack_insert_prepare(ct);
--
2.25.1