Subject Netfilter fixes for net
Author pablo@netfilter.org
Date 2026-06-19 11:54:36 +0000 UTC
Version
Cc davem@davemloft.net edumazet@google.com fw@strlen.de horms@kernel.org kuba@kernel.org netdev@vger.kernel.org netfilter-devel@vger.kernel.org pabeni@redhat.com pablo@netfilter.org
Patches (16)
Name Content [All]
[PATCH net 01/16] netfilter: flowtable: fix offloaded ct timeout never being extended [Body]
[PATCH net 02/16] netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst [Body]
[PATCH net 03/16] netfilter: xt_cluster: reject template conntracks in hash match [Body]
[PATCH net 04/16] netfilter: flowtable: fix and simplify IP6IP6 tunnel handling [Body]
[PATCH net 05/16] netfilter: nfnetlink: make OOM conditions fatal [Body]
[PATCH net 06/16] netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types [Body]
[PATCH net 07/16] netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types [Body]
[PATCH net 08/16] netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() [Body]
[PATCH net 09/16] netfilter: ipset: make sure gc is properly stopped [Body]
[PATCH net 10/16] netfilter: nft_payload: reject offsets exceeding 65535 bytes [Body]
[PATCH net 11/16] netfilter: nft_meta_bridge: add validate callback for get operations [Body]
[PATCH net 12/16] netfilter: nft_flow_offload: zero device address for non-ether case [Body]
[PATCH net 13/16] netfilter: nf_reject: skip iphdr options when looking for icmp header [Body]
[PATCH net 14/16] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations [Body]
[PATCH net 15/16] netfilter: nf_conntrack_expect: store master_tuple in expectation [Body]
[PATCH net 16/16] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak [Body]
Session 2026-06-19
ID (for dev) 38bf6e68-e6f2-44cc-a607-d7b2f1560594
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 96e7f9122aae0ed000ee321f324b812a447906d9 [Config] passed [Log]
[KASAN] Boot test: Base 96e7f9122aae0ed000ee321f324b812a447906d9 [Config] passed [Log]
[KASAN] Build Patched 96e7f9122aae0ed000ee321f324b812a447906d9 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 96e7f9122aae0ed000ee321f324b812a447906d9 [Config] [patched] passed [Log]
[KASAN] Fuzz 96e7f9122aae0ed000ee321f324b812a447906d9 [Config] 96e7f9122aae0ed000ee321f324b812a447906d9 [Config] [patched] passed [Log] [Artifacts]