diff options
| author | Paolo Abeni <pabeni@redhat.com> | 2026-03-19 17:39:33 +0300 |
|---|---|---|
| committer | Paolo Abeni <pabeni@redhat.com> | 2026-03-19 17:39:33 +0300 |
| commit | e7577a06ae28287ca415aec5c12277e3a80ee372 (patch) | |
| tree | 7af84ba5d5237a2e248b26c25e83e66de1349bae /include/linux | |
| parent | d75ec7e8ba1979a1eb0b9211d94d749cdce849c8 (diff) | |
| parent | dbdfaae9609629a9569362e3b8f33d0a20fd783c (diff) | |
| download | linux-e7577a06ae28287ca415aec5c12277e3a80ee372.tar.xz | |
Merge tag 'nf-26-03-19' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf
Florian Westphal says:
====================
netfilter: updates for net
The following patchset contains Netfilter fixes for *net*:
1) Fix UaF when netfilter bpf link goes away while nfnetlink dumps
current hook list, we have to wait until rcu readers are gone.
2) Fix UaF when flowtable fails to register all devices, similar
bug as 1). From Pablo Neira Ayuso.
3) nfnetlink_osf fails to properly validate option length fields.
From Weiming Shi.
netfilter pull request nf-26-03-19
* tag 'nf-26-03-19' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:
nfnetlink_osf: validate individual option lengths in fingerprints
netfilter: nf_tables: release flowtable after rcu grace period on error
netfilter: bpf: defer hook memory release until rcu readers are done
====================
Link: https://patch.msgid.link/20260319093834.19933-1-fw@strlen.de
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions