Subject netfilter: add restrictions/validations for packet rewrite
Author fw@strlen.de
Date 2026-06-09 11:51:53 +0000 UTC
Version
Cc fw@strlen.de netfilter-devel@vger.kernel.org
Patches (3)
Name Content [All]
[PATCH v3 nf-next 1/3] netfilter: nfnetlink_queue: restrict writes to network header [Body]
[PATCH v3 nf-next 2/3] netfilter: nftables: restrict linklayer and network header writes [Body]
[PATCH v3 nf-next 3/3] netfilter: nftables: restrict checkum update offset [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-06-09
Passed
ID (for dev) 9c03348e-b214-4b1c-a187-a2f61d69700c
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] passed [Log]
[KASAN] Boot test: Base bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] passed [Log]
[KASAN] Build Patched bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] [patched] passed [Log]
[KASAN] Boot test: Patched bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] [patched] passed [Log]
[KASAN] Fuzz bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] bfa3d89cc15c09f7d1581c834a5ed725189ec19f [Config] [patched] passed [Log] [Artifacts]