netfilter: nf_tables: disallow updates of anonymous sets

jira VUlN-429
subsystem-sync netfilter:nf_tables 4.18.0-511
commit-author Pablo Neira Ayuso <[email protected]>
commit b770283

Disallow updates of set timeout and garbage collection parameters for
anonymous sets.

Fixes: 123b996 ("netfilter: nf_tables: honor set timeout and garbage collection updates")
	Signed-off-by: Pablo Neira Ayuso <[email protected]>
(cherry picked from commit b770283)
	Signed-off-by: Greg Rose <[email protected]>

Author: gvrose8192

net/netfilter/nf_tables_api.c

@@ -4207,6 +4207,9 @@ static int nf_tables_newset(struct net *net, struct sock *nlsk,
 		if (nlh->nlmsg_flags & NLM_F_REPLACE)
 			return -EOPNOTSUPP;
 
+		if (nft_set_is_anonymous(set))
+			return -EOPNOTSUPP;
+
 		return 0;
 	}