Re: [PATCH nf-next] netfilter: flowtable: check namespace before iterating flows

[Qingfang Deng]

Hi,

On 9/9/2026 7:16 PM, Phil Sutter wrote:
> A second caller of nf_flow_table_gc_cleanup is
> nf_flow_table_indr_cleanup in net/netfilter/nf_flow_table_offload.c. Is
> the net_eq-check needed there as well? If not, could you please update
> the patch description with a statement explaining why?

No. Its callback uses the device bound to the flowtable, which belongs 
to the same namespace.

Kind regards,
Qingfang