Subject netfilter: switch ipset to rhashtable
Author fw@strlen.de
Date 2026-08-06 10:19:41 +0000 UTC
Version
Cc fw@strlen.de kadlec@netfilter.org netfilter-devel@vger.kernel.org
Patches (7)
Name Content [All]
[PATCH nf 1/7] netfilter: ipset: remove need to allocate memory on delete operations [Body]
[PATCH nf 2/7] netfilter: ipset: let destroy callbacks adjust ext mem size [Body]
[PATCH nf 3/7] netfilter: ipset: add rhashtable boilerplate stubs [Body]
[PATCH nf 4/7] netfilter: ipset: add rhltable boilerplate stubs [Body]
[PATCH nf 5/7] netfilter: ipset: replace internal hash table with rhashtable [Body]
[PATCH nf 6/7] netfilter: ipset: re-add forceadd support for rhashtable [Body]
[PATCH nf 7/7] netfilter: ipset: also report mem size for cidr storage to userspace [Body]
Series Summary
2 Findings
finding UBSAN: shift-out-of-bounds in hash_netiface6_head
Log Syz Repro
finding UBSAN: shift-out-of-bounds in hash_netportnet6_head
Log Syz Repro
Sessions
Session 2026-08-06
2 Findings
ID (for dev) d69bd4d3-d9e3-42a6-b064-a0947e90389b
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 44871eadd07a7f004aa00cb87399461eea08c630 [Config] passed [Log]
[KASAN] Boot test: Base 44871eadd07a7f004aa00cb87399461eea08c630 [Config] passed [Log]
[KASAN] Build Patched 44871eadd07a7f004aa00cb87399461eea08c630 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 44871eadd07a7f004aa00cb87399461eea08c630 [Config] [patched] passed [Log]
[KASAN] Fuzz 44871eadd07a7f004aa00cb87399461eea08c630 [Config] 44871eadd07a7f004aa00cb87399461eea08c630 [Config] [patched] passed [Log] [Artifacts]
finding UBSAN: shift-out-of-bounds in hash_netiface6_head
Log Syz Repro
finding UBSAN: shift-out-of-bounds in hash_netportnet6_head
Log Syz Repro