--- zzzz-none-000/linux-4.4.271/net/ipv6/netfilter/ip6_tables.c	2021-06-03 06:22:09.000000000 +0000
+++ hawkeye-5590-750/linux-4.4.271/net/ipv6/netfilter/ip6_tables.c	2023-04-19 10:22:30.000000000 +0000
@@ -349,6 +349,8 @@
 	IP_NF_ASSERT(table->valid_hooks & (1 << hook));
 
 	local_bh_disable();
+	rcu_read_lock();
+
 	addend = xt_write_recseq_begin();
 	private = table->private;
 	/*
@@ -448,6 +450,7 @@
 	} while (!acpar.hotdrop);
 
 	xt_write_recseq_end(addend);
+	rcu_read_unlock();
 	local_bh_enable();
 
 #ifdef DEBUG_ALLOW_ALL
@@ -1258,6 +1261,7 @@
 	xt_entry_foreach(iter, oldinfo->entries, oldinfo->size)
 		cleanup_entry(iter, net);
 
+	synchronize_rcu();
 	xt_free_table_info(oldinfo);
 	if (copy_to_user(counters_ptr, counters,
 			 sizeof(struct xt_counters) * num_counters) != 0) {