diff options
author | David S. Miller <davem@davemloft.net> | 2018-06-13 23:04:48 +0200 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2018-06-13 23:04:48 +0200 |
commit | 60d061e3470357b902c74f811772b2effc9ec5a0 (patch) | |
tree | 84d75691d70cfd2cc2fc9c29ddf7abf79ca46cb6 /README | |
parent | xen/netfront: raise max number of slots in xennet_get_responses() (diff) | |
parent | netfilter: nf_conncount: Fix garbage collection with zones (diff) | |
download | linux-60d061e3470357b902c74f811772b2effc9ec5a0.tar.xz linux-60d061e3470357b902c74f811772b2effc9ec5a0.zip |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
The following patchset contains Netfilter patches for your net tree:
1) Fix NULL pointer dereference from nf_nat_decode_session() if NAT is
not loaded, from Prashant Bhole.
2) Fix socket extension module autoload.
3) Don't bogusly reject sets with the NFT_SET_EVAL flag set on from
the dynset extension.
4) Fix races with nf_tables module removal and netns exit path,
patches from Florian Westphal.
5) Don't hit BUG_ON if jumpstack goes too deep, instead hit
WARN_ON_ONCE, from Taehee Yoo.
6) Another NULL pointer dereference from ctnetlink, again if NAT is
not loaded, from Florian Westphal.
7) Fix x_tables match list corruption in xt_connmark module removal
path, also from Florian.
8) nf_conncount doesn't properly deal with conntrack zones, hence
garbage collector may get rid of entries in a different zone.
From Yi-Hung Wei.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'README')
0 files changed, 0 insertions, 0 deletions