[PATCH net 0/6] ovs, net/sched: fixes for UAF after conntrack extension realloc · Ilya Maximets <i.maximets@ovn.org> · 2026-09-21
[PATCH net 1/6] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry · Ilya Maximets <i.maximets@ovn.org> · 2026-09-21
Re: [PATCH net 1/6] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry · netdev-bot+sashiko@kernel.org · 2026-09-22
Re: [PATCH net 1/6] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry · Ilya Maximets <i.maximets@ovn.org> · 2026-09-22
Re: [PATCH net 1/6] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry · Aaron Conole <aconole@redhat.com> · 2026-09-22
[PATCH net 2/6] net: openvswitch: conntrack: remove 'add_helper' dead code · Ilya Maximets <i.maximets@ovn.org> · 2026-09-21
Re: [PATCH net 2/6] net: openvswitch: conntrack: remove 'add_helper' dead code · netdev-bot+sashiko@kernel.org · 2026-09-22
Re: [PATCH net 2/6] net: openvswitch: conntrack: remove 'add_helper' dead code · Ilya Maximets <i.maximets@ovn.org> · 2026-09-22
Re: [PATCH net 2/6] net: openvswitch: conntrack: remove 'add_helper' dead code · Aaron Conole <aconole@redhat.com> · 2026-09-22
[PATCH net 3/6] net: openvswitch: conntrack: fix helper UAF due to extensions realloc · Ilya Maximets <i.maximets@ovn.org> · 2026-09-21
Re: [PATCH net 3/6] net: openvswitch: conntrack: fix helper UAF due to extensions realloc · netdev-bot+sashiko@kernel.org · 2026-09-22
Re: [PATCH net 3/6] net: openvswitch: conntrack: fix helper UAF due to extensions realloc · Ilya Maximets <i.maximets@ovn.org> · 2026-09-22
Re: [PATCH net 3/6] net: openvswitch: conntrack: fix helper UAF due to extensions realloc · Aaron Conole <aconole@redhat.com> · 2026-09-22
[PATCH net 4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry · Ilya Maximets <i.maximets@ovn.org> · 2026-09-21
Re: [PATCH net 4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry · netdev-bot+sashiko@kernel.org · 2026-09-22
Re: [PATCH net 4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry · Ilya Maximets <i.maximets@ovn.org> · 2026-09-22
Re: [PATCH net 4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry · Aaron Conole <aconole@redhat.com> · 2026-09-22
Re: [PATCH net 4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry · Xin Long <lucien.xin@gmail.com> · 2026-09-22
Re: [PATCH net 4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry · Jamal Hadi Salim <jhs@mojatatu.com> · 2026-09-22
[PATCH net 5/6] net/sched: act_ct: remove 'add_helper' dead code · Ilya Maximets <i.maximets@ovn.org> · 2026-09-21
Re: [PATCH net 5/6] net/sched: act_ct: remove 'add_helper' dead code · Aaron Conole <aconole@redhat.com> · 2026-09-22
Re: [PATCH net 5/6] net/sched: act_ct: remove 'add_helper' dead code · Xin Long <lucien.xin@gmail.com> · 2026-09-22
Re: [PATCH net 5/6] net/sched: act_ct: remove 'add_helper' dead code · Jamal Hadi Salim <jhs@mojatatu.com> · 2026-09-22
[PATCH net 6/6] net/sched: act_ct: fix helper UAF due to extensions realloc · Ilya Maximets <i.maximets@ovn.org> · 2026-09-21
Re: [PATCH net 6/6] net/sched: act_ct: fix helper UAF due to extensions realloc · netdev-bot+sashiko@kernel.org · 2026-09-22
Re: [PATCH net 6/6] net/sched: act_ct: fix helper UAF due to extensions realloc · Ilya Maximets <i.maximets@ovn.org> · 2026-09-22
Re: [PATCH net 6/6] net/sched: act_ct: fix helper UAF due to extensions realloc · Xin Long <lucien.xin@gmail.com> · 2026-09-22
Re: [PATCH net 6/6] net/sched: act_ct: fix helper UAF due to extensions realloc · Jamal Hadi Salim <jhs@mojatatu.com> · 2026-09-22
Re: [PATCH net 6/6] net/sched: act_ct: fix helper UAF due to extensions realloc · Aaron Conole <aconole@redhat.com> · 2026-09-23
Re: [PATCH net 0/6] ovs, net/sched: fixes for UAF after conntrack extension realloc · Jakub Kicinski <kuba@kernel.org> · 2026-09-24
Re: [PATCH net 0/6] ovs, net/sched: fixes for UAF after conntrack extension realloc · patchwork-bot+netdevbpf@kernel.org · 2026-09-24

Re: [PATCH net 0/6] ovs, net/sched: fixes for UAF after conntrack extension realloc

From: Jakub Kicinski <kuba@kernel.org>
Date: 2026-09-24 01:21:56
Also in: lkml, netfilter-devel

On Mon, 21 Sep 2026 16:55:42 +0200 Ilya Maximets wrote:

One clean up change plus two fixes for the UAF on helper extension
realloc x 2.  First half for OVS and the second half for the similar
code in act_ct.  This should cover all the known cases of this problem
in these two modules.

Florian, Pablo, did you give up on the TC conntrack integration or can
we still hope for an ack? :)

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help