Subject netfilter: add restrictions/validations for packet rewrite
Author fw@strlen.de
Date 2026-06-08 15:23:17 +0000 UTC
Version
Cc fw@strlen.de kylebot@openai.com netfilter-devel@vger.kernel.org
Patches (3)
Name Content [All]
[PATCH] netfilter: x_tables: avoid leaking percpu counter pointers [Body]
[PATCH nf-next v2 2/3] netfilter: nftables: restrict linklayer and network header writes [Body]
[PATCH nf-next v2 3/3] netfilter: nftables: restrict checkum update offset [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-06-08
Passed
ID (for dev) 82b84d0a-0f7b-49ef-86d7-d5fbec03ac76
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] passed [Log]
[KASAN] Boot test: Base bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] passed [Log]
[KASAN] Build Patched bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] [patched] passed [Log]
[KASAN] Boot test: Patched bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] [patched] passed [Log]
[KASAN] Fuzz bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] [patched] passed [Log] [Artifacts]