mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-09-18 22:14:16 +00:00
![]() -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEjF9xRqF1emXiQiqU1w0aZmrPKyEFAmcjVIwACgkQ1w0aZmrP KyGfKA/+Nhj8MpYPl/TiaWitL9quL8ExcSr8DBJPlG0w/LzlrdYZqKvgxUfTDHKi GYnfgFrHlrNG0E6HiWS8RPzjJjT8of/hrnFU/pMkGh97hQpDLkkoG9/wAScO3NGQ c8roORHe3gSH1ZR6ExCy6wdw1aUxGzA7amZULDc+bU64KamGgFoBTSI/YG0bW0FI s5waIGtqfo/Wg+uyRv5Ny477aWIrWTjhG0T/64lziPws9rZ40cTfg8N22PVX0Yog pojOC8mpMyys5hNu6UBB0pdX5J6ARO1seK0aj1i+XEkJYHb1u9/oySfVoI0yqQ3Y 9Kt8nc/NvBoOvK2xlLApYIHC8//YCAE94n6JwrZPyb16L93yxhpGO3kZNq6ydJdU 2tgv23clW3keMvJijICc0bxQdUqwKdQZcLRwkVAvXAWvOCI9x72Y6GeJS4xRnnBF RDug6uuLMVoh9UlUZ95HiXsFLzilXtkFHGaG0KjEKdIECgajTBlcwpFyDGktto44 XVr4cjTQ5amUVqfcG7ycFLsVjk8dYEkYbTE6FMenSAeFIYzo+D8xQnoMKFYE+IXt C229Z9FZJvmbduZEoeaMI24CnV4P0HjNPvrTMw8go2iSbi89fLPEscCS/z/eUqQS 4FB+E93LaCKhSYujQIAB+sZcNlG0Q8+7f10mv8SsNZxJZmPOIeU= =RHbi -----END PGP SIGNATURE----- Merge tag 'nf-24-10-31' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf Pablo Neira Ayuso says: ==================== The following patchset contains Netfilter fixes for net: 1) Remove unused parameters in conntrack_dump_flush.c used by selftests, from Liu Jing. 2) Fix possible UaF when removing xtables module via getsockopt() interface, from Dong Chenchen. 3) Fix potential crash in nf_send_reset6() reported by syzkaller. From Eric Dumazet 4) Validate offset and length before calling skb_checksum() in nft_payload, otherwise hitting BUG() is possible. netfilter pull request 24-10-31 * tag 'nf-24-10-31' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() netfilter: Fix use-after-free in get_info() selftests: netfilter: remove unused parameter ==================== Link: https://patch.msgid.link/ Signed-off-by: Paolo Abeni <pabeni@redhat.com> |
||
---|---|---|
.. | ||
af_unix | ||
forwarding | ||
hsr | ||
lib | ||
mptcp | ||
netfilter | ||
openvswitch | ||
packetdrill | ||
rds | ||
tcp_ao | ||
.gitignore | ||
altnames.sh | ||
amt.sh | ||
arp_ndisc_evict_nocarrier.sh | ||
arp_ndisc_untracked_subnets.sh | ||
bareudp.sh | ||
big_tcp.sh | ||
bind_bhash.c | ||
bind_bhash.sh | ||
bind_timewait.c | ||
bind_wildcard.c | ||
bpf.mk | ||
bpf_offload.py | ||
cmsg_ipv6.sh | ||
cmsg_sender.c | ||
cmsg_so_mark.sh | ||
cmsg_time.sh | ||
config | ||
drop_monitor_tests.sh | ||
epoll_busy_poll.c | ||
fcnal-test.sh | ||
fdb_flush.sh | ||
fib-onlink-tests.sh | ||
fib_nexthop_multiprefix.sh | ||
fib_nexthop_nongw.sh | ||
fib_nexthops.sh | ||
fib_rule_tests.sh | ||
fib_tests.sh | ||
fin_ack_lat.c | ||
fin_ack_lat.sh | ||
fq_band_pktlimit.sh | ||
gre_gso.sh | ||
gro.c | ||
gro.sh | ||
hwtstamp_config.c | ||
icmp.sh | ||
icmp_redirect.sh | ||
in_netns.sh | ||
io_uring_zerocopy_tx.c | ||
io_uring_zerocopy_tx.sh | ||
ioam6.sh | ||
ioam6_parser.c | ||
ip6_gre_headroom.sh | ||
ip_defrag.c | ||
ip_defrag.sh | ||
ip_local_port_range.c | ||
ip_local_port_range.sh | ||
ipsec.c | ||
ipv6_flowlabel.c | ||
ipv6_flowlabel.sh | ||
ipv6_flowlabel_mgr.c | ||
l2_tos_ttl_inherit.sh | ||
l2tp.sh | ||
lib.sh | ||
Makefile | ||
msg_zerocopy.c | ||
msg_zerocopy.sh | ||
nat6to4.bpf.c | ||
ncdevmem.c | ||
ndisc_unsolicited_na_test.sh | ||
net_helper.sh | ||
netdevice.sh | ||
netns-name.sh | ||
netns-sysctl.sh | ||
nettest.c | ||
nl_netdev.py | ||
pmtu.sh | ||
psock_fanout.c | ||
psock_lib.h | ||
psock_snd.c | ||
psock_snd.sh | ||
psock_tpacket.c | ||
reuseaddr_conflict.c | ||
reuseaddr_ports_exhausted.c | ||
reuseaddr_ports_exhausted.sh | ||
reuseport_addr_any.c | ||
reuseport_addr_any.sh | ||
reuseport_bpf.c | ||
reuseport_bpf_cpu.c | ||
reuseport_bpf_numa.c | ||
reuseport_dualstack.c | ||
route_localnet.sh | ||
rps_default_mask.sh | ||
rtnetlink.sh | ||
run_afpackettests | ||
run_netsocktests | ||
rxtimestamp.c | ||
rxtimestamp.sh | ||
sample_map_ret0.bpf.c | ||
sample_ret0.bpf.c | ||
sctp_hello.c | ||
sctp_vrf.sh | ||
settings | ||
setup_loopback.sh | ||
setup_veth.sh | ||
sk_bind_sendto_listen.c | ||
sk_connect_zero_addr.c | ||
sk_so_peek_off.c | ||
so_incoming_cpu.c | ||
so_netns_cookie.c | ||
so_txtime.c | ||
so_txtime.sh | ||
socket.c | ||
srv6_end_dt4_l3vpn_test.sh | ||
srv6_end_dt6_l3vpn_test.sh | ||
srv6_end_dt46_l3vpn_test.sh | ||
srv6_end_dx4_netfilter_test.sh | ||
srv6_end_dx6_netfilter_test.sh | ||
srv6_end_flavors_test.sh | ||
srv6_end_next_csid_l3vpn_test.sh | ||
srv6_end_x_next_csid_l3vpn_test.sh | ||
srv6_hencap_red_l3vpn_test.sh | ||
srv6_hl2encap_red_l2vpn_test.sh | ||
stress_reuseport_listen.c | ||
stress_reuseport_listen.sh | ||
tap.c | ||
tcp_fastopen_backup_key.c | ||
tcp_fastopen_backup_key.sh | ||
tcp_inq.c | ||
tcp_mmap.c | ||
test_blackhole_dev.sh | ||
test_bpf.sh | ||
test_bridge_backup_port.sh | ||
test_bridge_neigh_suppress.sh | ||
test_ingress_egress_chaining.sh | ||
test_vxlan_fdb_changelink.sh | ||
test_vxlan_mdb.sh | ||
test_vxlan_nolocalbypass.sh | ||
test_vxlan_under_vrf.sh | ||
test_vxlan_vnifiltering.sh | ||
timestamping.c | ||
tls.c | ||
toeplitz.c | ||
toeplitz.sh | ||
toeplitz_client.sh | ||
traceroute.sh | ||
tun.c | ||
txring_overwrite.c | ||
txtimestamp.c | ||
txtimestamp.sh | ||
udpgro.sh | ||
udpgro_bench.sh | ||
udpgro_frglist.sh | ||
udpgro_fwd.sh | ||
udpgso.c | ||
udpgso.sh | ||
udpgso_bench.sh | ||
udpgso_bench_rx.c | ||
udpgso_bench_tx.c | ||
unicast_extensions.sh | ||
veth.sh | ||
vlan_hw_filter.sh | ||
vrf-xfrm-tests.sh | ||
vrf_route_leaking.sh | ||
vrf_strict_mode_test.sh | ||
xdp_dummy.bpf.c | ||
xfrm_policy.sh | ||
xfrm_policy_add_speed.sh | ||
ynl.mk |