Patch Series

Subject netfilter: nf_tables: fix false negative lookups with ongoing transaction
Author fw@strlen.de
Date 2025-09-10 08:02:18 +0000 UTC
Version 1
Cc fw@strlen.de netfilter-devel@vger.kernel.org pablo@netfilter.org s.hanreich@proxmox.com sbrivio@redhat.com

Patches (5)

Name Content [All]
[PATCH nf 1/5] netfilter: nft_set_pipapo: don't check genbit from packetpath lookups [Body]
[PATCH nf 2/5] netfilter: nft_set_rbtree: continue traversal if element is inactive [Body]
[PATCH nf 3/5] netfilter: nf_tables: place base_seq in struct net [Body]
[PATCH nf 4/5] netfilter: nf_tables: make nft_set_do_lookup available unconditionally [Body]
[PATCH nf 5/5] netfilter: nf_tables: restart set lookup on base_seq change [Body]

Session 2025-09-10

ID (for dev) d942c538-8c09-41e3-8f49-2dcb3c631a26
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
Build Base e2a10daba84968f6b5777d150985fd7d6abc9c84 [Config] passed [Log]
Build Patched e2a10daba84968f6b5777d150985fd7d6abc9c84 [Config] [patched] passed [Log]
Boot test: Base e2a10daba84968f6b5777d150985fd7d6abc9c84 [Config] passed
Boot test: Patched e2a10daba84968f6b5777d150985fd7d6abc9c84 [Config] [patched] passed
Fuzzing e2a10daba84968f6b5777d150985fd7d6abc9c84 [Config] e2a10daba84968f6b5777d150985fd7d6abc9c84 [Config] [patched] passed [Log] [Artifacts]