diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 3e8a80f2177320276611c75ad775a152bfbadf8c..ac670df114d6530c4a4df634470f90cf26073b15 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -3516,6 +3516,8 @@ static int nf_tables_delrule(struct net *net, struct sock *nlsk, list_for_each_entry(chain, &table->chains, list) { if (!nft_is_active_next(net, chain)) continue; + if (nft_chain_is_bound(chain)) + continue; ctx.chain = chain; err = nft_delrule_by_chain(&ctx);