Thread (10 messages) 10 messages, 2 authors, 18d ago

Re: [PATCH net 1/8] netfilter: revalidate bridge ports

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-06-11 10:40:17
Also in: netfilter-devel

Hello:

This series was applied to netdev/net.git (main)
by Pablo Neira Ayuso [off-list ref]:

On Wed, 10 Jun 2026 18:16:21 +0200 you wrote:
From: Florian Westphal <fw@strlen.de>

ebt_redirect_tg() dereferences br_port_get_rcu() return without a
NULL check, causing a kernel panic when the bridge port has been
removed between the original hook invocation and an NFQUEUE
reinject.

[...]
Here is the summary with links:
  - [net,1/8] netfilter: revalidate bridge ports
    https://git.kernel.org/netdev/net/c/ccb9fd4b8753
  - [net,2/8] netfilter: nf_tables_offload: drop device refcount on error
    https://git.kernel.org/netdev/net/c/efc542561729
  - [net,3/8] netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
    https://git.kernel.org/netdev/net/c/c3009418f9fa
  - [net,4/8] netfilter: x_tables: avoid leaking percpu counter pointers
    https://git.kernel.org/netdev/net/c/f7f2fbb0e893
  - [net,5/8] netfilter: nf_log: validate MAC header was set before dumping it
    https://git.kernel.org/netdev/net/c/a84b6fedbc97
  - [net,6/8] netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
    https://git.kernel.org/netdev/net/c/772cecf198da
  - [net,7/8] netfilter: nft_fib: fix stale stack leak via the OIFNAME register
    https://git.kernel.org/netdev/net/c/ab185e0c4fb8
  - [net,8/8] netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register
    https://git.kernel.org/netdev/net/c/c7d573551f92

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help