Subject netfilter: updates for net
Author fw@strlen.de
Date 2026-06-30 04:52:35 +0000 UTC
Version
Cc davem@davemloft.net edumazet@google.com fw@strlen.de kuba@kernel.org netdev@vger.kernel.org netfilter-devel@vger.kernel.org pabeni@redhat.com pablo@netfilter.org
Patches (9)
Name Content [All]
[PATCH net 1/9] netfilter: nf_conntrack_expect: zero at allocation time [Body]
[PATCH net 2/9] netfilter: nft_set_pipapo: don't leak bad clone into future transaction [Body]
[PATCH net 3/9] netfilter: ipset: fix race between dump and ip_set_list resize [Body]
[PATCH net 4/9] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it [Body]
[PATCH net 5/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master [Body]
[PATCH net 6/9] netfilter: nft_fib: reject fib expression on the netdev egress hook [Body]
[PATCH net 7/9] netfilter: nfnetlink_queue: restrict writes to network header [Body]
[PATCH net 8/9] netfilter: nftables: restrict linklayer and network header writes [Body]
[PATCH net 9/9] netfilter: nftables: restrict checkum update offset [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-06-30
Passed
ID (for dev) 800a1e8a-849d-45ae-8102-7257cd8cefe9
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 32f1c2bbb26ae2be476c8b66e3b41789b6b97bfc [Config] passed [Log]
[KASAN] Boot test: Base 32f1c2bbb26ae2be476c8b66e3b41789b6b97bfc [Config] passed [Log]
[KASAN] Build Patched 32f1c2bbb26ae2be476c8b66e3b41789b6b97bfc [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 32f1c2bbb26ae2be476c8b66e3b41789b6b97bfc [Config] [patched] passed [Log]
[KASAN] Fuzz 32f1c2bbb26ae2be476c8b66e3b41789b6b97bfc [Config] 32f1c2bbb26ae2be476c8b66e3b41789b6b97bfc [Config] [patched] passed [Log] [Artifacts]