Thread (31 messages) 31 messages, 7 authors, 4d ago

Re: [PATCH net 0/6] ovs, net/sched: fixes for UAF after conntrack extension realloc

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-09-24 17:11:19
Also in: lkml, netfilter-devel

Hello:

This series was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:

On Mon, 21 Sep 2026 16:55:42 +0200 you wrote:
One clean up change plus two fixes for the UAF on helper extension
realloc x 2.  First half for OVS and the second half for the similar
code in act_ct.  This should cover all the known cases of this problem
in these two modules.


Ilya Maximets (6):
  net: openvswitch: conntrack: avoid modifying shared unconfirmed ct
    entry
  net: openvswitch: conntrack: remove 'add_helper' dead code
  net: openvswitch: conntrack: fix helper UAF due to extensions realloc
  net/sched: act_ct: avoid modifying shared unconfirmed ct entry
  net/sched: act_ct: remove 'add_helper' dead code
  net/sched: act_ct: fix helper UAF due to extensions realloc

[...]
Here is the summary with links:
  - [net,1/6] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
    https://git.kernel.org/netdev/net/c/26b2bd70d224
  - [net,2/6] net: openvswitch: conntrack: remove 'add_helper' dead code
    https://git.kernel.org/netdev/net/c/5e6c14dd42a1
  - [net,3/6] net: openvswitch: conntrack: fix helper UAF due to extensions realloc
    https://git.kernel.org/netdev/net/c/1a4151e6be57
  - [net,4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry
    https://git.kernel.org/netdev/net/c/f85009dfcd65
  - [net,5/6] net/sched: act_ct: remove 'add_helper' dead code
    https://git.kernel.org/netdev/net/c/00df72e39f30
  - [net,6/6] net/sched: act_ct: fix helper UAF due to extensions realloc
    https://git.kernel.org/netdev/net/c/dad19b59da05

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help