diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index be4924aeaf0e..57affe22e0bd 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -6540,7 +6540,10 @@ static int nft_get_set_elem(struct nft_ctx *ctx, const struct nft_set *set, return err; } + rcu_read_lock(); err = nft_setelem_get(ctx, set, &elem, flags); + rcu_read_unlock(); + if (err < 0) return err;