1 files changed, 7 insertions, 0 deletions

diff --git a/net/netfilter/nf_sockopt.c b/net/netfilter/nf_sockopt.c
index e32761ce260c..aa2831587b82 100644
--- a/net/netfilter/nf_sockopt.c
+++ b/net/netfilter/nf_sockopt.c
@@ -69,6 +69,9 @@ static int nf_sockopt(struct sock *sk, int pf, int val,
         struct nf_sockopt_ops *ops;
         int ret;
 
+        if (sk->sk_net != &init_net)
+                return -ENOPROTOOPT;
+
         if (mutex_lock_interruptible(&nf_sockopt_mutex) != 0)
                 return -EINTR;
 
@@ -125,6 +128,10 @@ static int compat_nf_sockopt(struct sock *sk, int pf, int val,
         struct nf_sockopt_ops *ops;
         int ret;
 
+        if (sk->sk_net != &init_net)
+                return -ENOPROTOOPT;
+
+
         if (mutex_lock_interruptible(&nf_sockopt_mutex) != 0)
                 return -EINTR;