Florian Mickler [off-list ref] wrote:

On Mon, 23 Aug 2010 14:41:46 -0700 (PDT)
David Miller [off-list ref] wrote:

quoted

From: Florian Westphal <fw@strlen.de>
Date: Mon, 23 Aug 2010 14:56:26 +0200

quoted

commit f3c5c1bfd430858d3a05436f82c51e53104feb6b
(netfilter: xtables: make ip_tables reentrant) forgot to
also compute the jumpstack size in the compat handlers.

Result is that "iptables -I INPUT -j userchain" turns into -j DROP.

[..]

Should this go to stable? 
It seems commit f3c5c1bdf was introduced in 2.6.35.

My bad, I forgot to add a "Cc: stable" tag.
I'll submit it now, thanks for the heads-up...