diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index e11a1cad07631577be644ede5e13500dd553d6ff..31bc82998d42814aa82496693abadcbba19114a8 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -2242,6 +2242,9 @@ static int nf_tables_addchain(struct nft_ctx *ctx, u8 family, u8 genmask, struct nft_stats __percpu *stats = NULL; struct nft_chain_hook hook; + if (table->flags & __NFT_TABLE_F_UPDATE) + return -EINVAL; + if (flags & NFT_CHAIN_BINDING) return -EOPNOTSUPP;