[PATCH net 0/3] Netfilter fixes for net
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2021-12-17 08:53:16
Also in:
netfilter-devel
Hi,
The following patchset contains Netfilter fixes for net:
1) Fix UAF in set catch-all element, from Eric Dumazet.
2) Fix MAC mangling for multicast/loopback traffic in nfnetlink_queue
and nfnetlink_log, from Ignacy GawÄdzki.
3) Remove expired entries from ctnetlink dump path regardless the tuple
direction, from Florian Westphal.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Thanks.
----------------------------------------------------------------
The following changes since commit 1d1c950faa81e1c287c9e14f307f845b190eb578:
Merge tag 'wireless-drivers-2021-12-15' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers (2021-12-15 14:43:07 +0000)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD
for you to fetch changes up to 76f12e632a15a20c8de3532d64a0708cf0e32f11:
netfilter: ctnetlink: remove expired entries first (2021-12-16 14:10:52 +0100)
----------------------------------------------------------------
Eric Dumazet (1):
netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
Florian Westphal (1):
netfilter: ctnetlink: remove expired entries first
Ignacy GawÄdzki (1):
netfilter: fix regression in looped (broad|multi)cast's MAC handling
net/netfilter/nf_conntrack_netlink.c | 5 +++--
net/netfilter/nf_tables_api.c | 4 ++--
net/netfilter/nfnetlink_log.c | 3 ++-
net/netfilter/nfnetlink_queue.c | 3 ++-
4 files changed, 9 insertions(+), 6 deletions(-)