diff options
| author |   Jakub Kicinski <kuba@kernel.org> | 2022-05-31 20:58:24 -0700 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2022-05-31 20:58:24 -0700 |
| commit | b3c0a9efbe0e9471afae2986201da09c046bbd77 (patch) | |
| tree | 30be8076812f286b8dc4d46dcc6d12d95aec5d98 /net/ipv4 | |
| parent | net: sched: add barrier to fix packet stuck problem for lockless qdisc (diff) | |
| parent | netfilter: flowtable: fix nft_flow_route source address for nat case (diff) | |
| download | linux-dev-b3c0a9efbe0e9471afae2986201da09c046bbd77.tar.xz linux-dev-b3c0a9efbe0e9471afae2986201da09c046bbd77.zip | |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
1) Missing proper sanitization for nft_set_desc_concat_parse().
2) Missing mutex in nf_tables pre_exit path.
3) Possible double hook unregistration from clean_net path.
4) Missing FLOWI_FLAG_ANYSRC flag in flowtable route lookup.
Fix incorrect source and destination address in case of NAT.
Patch from wenxu.
* git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:
netfilter: flowtable: fix nft_flow_route source address for nat case
netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag
netfilter: nf_tables: double hook unregistration in netns path
netfilter: nf_tables: hold mutex on netns pre_exit path
netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
====================
Link: https://lore.kernel.org/r/20220531215839.84765-1-pablo@netfilter.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'net/ipv4')
0 files changed, 0 insertions, 0 deletions