[PATCH net 0/2] Netfilter fixes for net
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2021-06-02 12:44:41
Also in:
netfilter-devel
Hi,
The following patchset contains Netfilter fixes for net:
1) Do not allow to add conntrack helper extension for confirmed
conntracks in the nf_tables ct expectation support.
2) Fix bogus EBUSY in nfnetlink_cthelper when NFCTH_PRIV_DATA_LEN
is passed on userspace helper updates.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Thank you!
----------------------------------------------------------------
The following changes since commit b000372627ce9dbbe641dafbf40db0718276ab77:
MAINTAINERS: nfc mailing lists are subscribers-only (2021-06-01 17:09:28 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD
for you to fetch changes up to 8971ee8b087750a23f3cd4dc55bff2d0303fd267:
netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches (2021-06-02 12:43:50 +0200)
----------------------------------------------------------------
Pablo Neira Ayuso (2):
netfilter: nft_ct: skip expectations for confirmed conntrack
netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
net/netfilter/nfnetlink_cthelper.c | 8 ++++++--
net/netfilter/nft_ct.c | 2 +-
2 files changed, 7 insertions(+), 3 deletions(-)