Re: [PATCH net 1/9] netfilter: nf_nat_sip: reload possible stale data pointer
From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-07-06 10:50:38
Also in:
netfilter-devel
Hello: This series was applied to netdev/net.git (main) by Florian Westphal [off-list ref]: On Fri, 3 Jul 2026 14:57:01 +0200 you wrote:
quoting sashiko:
------------------------------------------------------------------------
[..] noticed a potential memory bug and header corruption involving the
SIP NAT helper.
In net/netfilter/nf_nat_sip.c:nf_nat_sip():
if (skb_ensure_writable(skb, skb->len)) {
nf_ct_helper_log(skb, ct, "cannot mangle packet");
return NF_DROP;
}
uh = (void *)skb->data + protoff;
uh->dest = ct_sip_info->forced_dport;
if (!nf_nat_mangle_udp_packet(skb, ct, ctinfo, protoff,
0, 0, NULL, 0)) {
[...]
Here is the summary with links:
- [net,1/9] netfilter: nf_nat_sip: reload possible stale data pointer
https://git.kernel.org/netdev/net/c/77e43bcb7ec1
- [net,2/9] netfilter: xt_u32: reject invalid shift counts
https://git.kernel.org/netdev/net/c/64cdf7d30ac1
- [net,3/9] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
https://git.kernel.org/netdev/net/c/444853cd4382
- [net,4/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
https://git.kernel.org/netdev/net/c/278296b69fae
- [net,5/9] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
https://git.kernel.org/netdev/net/c/43ccc20b5a73
- [net,6/9] netfilter: nft_set_rbtree: get command skips end element with open interval
https://git.kernel.org/netdev/net/c/d63611cbe8af
- [net,7/9] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
https://git.kernel.org/netdev/net/c/6b335af0d0d1
- [net,8/9] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
https://git.kernel.org/netdev/net/c/2975324d164c
- [net,9/9] netfilter: xt_connmark: reject invalid shift parameters
https://git.kernel.org/netdev/net/c/1b47026fb4b3
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html