Hello:
This series was applied to netdev/net.git (main)
by Florian Westphal <[email protected]>:
On Fri, 3 Jul 2026 14:57:01 +0200 you wrote:
> quoting sashiko:
> ------------------------------------------------------------------------
> [..] noticed a potential memory bug and header corruption involving the
> SIP NAT helper.
>
> In net/netfilter/nf_nat_sip.c:nf_nat_sip():
> if (skb_ensure_writable(skb, skb->len)) {
> nf_ct_helper_log(skb, ct, "cannot mangle packet");
> return NF_DROP;
> }
> uh = (void *)skb->data + protoff;
> uh->dest = ct_sip_info->forced_dport;
> if (!nf_nat_mangle_udp_packet(skb, ct, ctinfo, protoff,
> 0, 0, NULL, 0)) {
>
> [...]
Here is the summary with links:
- [net,1/9] netfilter: nf_nat_sip: reload possible stale data pointer
https://git.kernel.org/netdev/net/c/77e43bcb7ec1
- [net,2/9] netfilter: xt_u32: reject invalid shift counts
https://git.kernel.org/netdev/net/c/64cdf7d30ac1
- [net,3/9] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
https://git.kernel.org/netdev/net/c/444853cd4382
- [net,4/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
https://git.kernel.org/netdev/net/c/278296b69fae
- [net,5/9] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
https://git.kernel.org/netdev/net/c/43ccc20b5a73
- [net,6/9] netfilter: nft_set_rbtree: get command skips end element with open interval
https://git.kernel.org/netdev/net/c/d63611cbe8af
- [net,7/9] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
https://git.kernel.org/netdev/net/c/6b335af0d0d1
- [net,8/9] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
https://git.kernel.org/netdev/net/c/2975324d164c
- [net,9/9] netfilter: xt_connmark: reject invalid shift parameters
https://git.kernel.org/netdev/net/c/1b47026fb4b3
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.