ef87cd8132
[ Upstream commitd46fc89414] catch-all set element might jump/goto to chain that uses expressions that require validation. Fixes:aaa31047a6("netfilter: nftables: add catch-all set element support") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Sasha Levin <sashal@kernel.org>