Patch Series

Subject	netfilter: nft_ct: reject ambiguous conntrack expressions in inet tables
Author	nickgarlis@gmail.com
Date	2025-09-02 21:54:33 +0000 UTC
Version	2
Cc	fw@strlen.de netfilter-devel@vger.kernel.org nickgarlis@gmail.com pablo@netfilter.org

Patches (1)

Name	Content
[PATCH v2] netfilter: nft_ct: reject ambiguous conntrack expressions in inet tables	[Body]

Session 2025-09-02

ID (for dev)	0f28f785-2270-4c9d-b976-18c6be8da0d7
Status	finished
Triaged	OK [Log]
Execution Log	[Link]

Test	Base	Patched	Verdict
Build Base	864ecc4a6dade82d3f70eab43dad0e277aa6fc78 [Config]		passed [Log]
Build Patched		864ecc4a6dade82d3f70eab43dad0e277aa6fc78 [Config] [patched]	passed [Log]
Boot test: Patched		864ecc4a6dade82d3f70eab43dad0e277aa6fc78 [Config] [patched]	passed
Boot test: Base	864ecc4a6dade82d3f70eab43dad0e277aa6fc78 [Config]		passed
Fuzzing	864ecc4a6dade82d3f70eab43dad0e277aa6fc78 [Config]	864ecc4a6dade82d3f70eab43dad0e277aa6fc78 [Config] [patched]	passed [Log] [Artifacts]
KASAN: slab-out-of-bounds Write in nft_meta_inner_init [Log] [Syz Repro] [C Repro]