Pablo Neira Ayuso ac46f3f35b netfilter: nf_conntrack_helper: add refcounting from datapath ... This patch adds a new ->ct_refcnt field to struct nf_conntrack_helper which is bumped when the helper is used by the ct helper extension. Drop this reference count when the conntrack entry is released. This is a packet path refcount which ensures that struct nf_conntrack_helper remains in place for tricky scenarios where a packet sits in nfqueue, or elsewhere, with a conntrack that refers to this helper. For simplicity, this leaves a single refcount for helper objects in place, remove the existing refcount for control plane that ensures that the helper does not go away if it is used by ruleset. On helper removal, the help callback is set to NULL to disable it from packet path and, after rcu grace period, existing expectations are removed. Update ctnetlink to disable access to .to_nlattr and .from_nlattr if the helper is going away. Remove nf_queue_nf_hook_drop() since it has proven not to be effective because packets with unconfirmed conntracks which are still flying to sit in nfqueue. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2026-06-05 16:16:44 +02:00
..
6lowpan	6lowpan: fix off-by-one in multicast context address compression	2026-06-01 19:10:16 -07:00
9p	9p/trans_xen: replace simple_strto* with kstrtouint	2026-04-16 02:57:01 +00:00
802	net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr	2026-06-04 08:52:41 -07:00
8021q	8021q: delete cleared egress QoS mappings	2026-04-23 12:13:57 +02:00
appletalk	appletalk: aarp: zero-initialize aarp_entry to prevent heap info leak	2026-06-03 18:08:58 -07:00
atm	atm: convert to getsockopt_iter	2026-05-22 11:11:09 -07:00
batman-adv	batman-adv: tt: directly retrieve wifi flags of net_device	2026-06-03 08:27:17 +02:00
bluetooth	Bluetooth: MGMT: Fix backward compatibility with userspace	2026-06-03 11:24:12 -04:00
bpf	bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb	2026-04-12 15:42:57 -07:00
bridge	bridge: mcast: Synchronously shutdown port multicast timers	2026-06-04 18:11:54 -07:00
can	Networking changes for 7.1.	2026-04-14 18:36:10 -07:00
ceph	libceph: Fix potential null-ptr-deref in decode_choose_args()	2026-05-12 21:00:59 +02:00
core	rtnetlink: use dev_isalive() in rtnl_getlink()	2026-06-04 18:16:14 -07:00
dcb	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
devlink	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
dns_resolver	net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query	2026-06-04 18:39:29 -07:00
dsa	net: dsa: add NETC switch tag support	2026-05-21 13:04:42 +02:00
ethernet	bonding: prevent potential infinite loop in bond_header_parse()	2026-03-16 19:29:45 -07:00
ethtool	net: ethtool: make sure __ethtool_get_link_ksettings() is ops-locked	2026-06-04 14:04:56 -07:00
handshake	net/handshake: Drain pending requests at net namespace exit	2026-05-28 13:35:32 +02:00
hsr	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
ieee802154	ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()	2026-06-04 08:51:32 -07:00
ife
ipv4	netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper	2026-06-05 13:25:18 +02:00
ipv6	ipv6: use READ_ONCE() in ipv6_flowlabel_get()	2026-06-04 18:31:18 -07:00
iucv	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-05-28 14:02:21 -07:00
kcm	kcm: convert to getsockopt_iter	2026-05-10 10:11:08 -07:00
key	xfrm: route MIGRATE notifications to caller's netns	2026-05-07 09:31:10 +02:00
l2tp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
l3mdev
lapb	treewide: Replace kmalloc with kmalloc_obj for non-scalar types	2026-02-21 01:02:28 -08:00
llc	llc: Add SPDX id lines to some llc source files	2026-05-26 17:26:57 -07:00
mac80211	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
mac802154	bonding: prevent potential infinite loop in bond_header_parse()	2026-03-16 19:29:45 -07:00
mctp	mctp: convert to getsockopt_iter	2026-05-10 10:11:07 -07:00
mpls	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-04-02 11:03:13 -07:00
mptcp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
ncsi	net: ncsi: fix skb leak in error paths	2026-03-06 17:34:48 -08:00
netfilter	netfilter: nf_conntrack_helper: add refcounting from datapath	2026-06-05 16:16:44 +02:00
netlabel	netlabel: fix IPv6 unlabeled address add error handling	2026-05-25 11:44:09 -07:00
netlink	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-05-28 14:02:21 -07:00
nfc	nfc: hci: fix out-of-bounds read in HCP header parsing	2026-05-07 12:42:09 +02:00
nsh
openvswitch	openvswitch: vport: fix race between linking and the device notifier	2026-05-18 16:38:45 -07:00
packet	net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()	2026-04-22 20:16:34 -07:00
phonet	phonet/pep: disable BH around forwarded sk_receive_skb()	2026-05-21 07:38:21 -07:00
psample	treewide: Replace kmalloc with kmalloc_obj for non-scalar types	2026-02-21 01:02:28 -08:00
psp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-05-07 11:19:07 -07:00
qrtr	net: qrtr: fix node refcount leak on ctrl packet alloc failure	2026-06-01 19:53:45 -07:00
rds	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
rfkill	net: rfkill: prevent unlimited numbers of rfkill events from being created	2026-04-07 12:35:04 +02:00
rxrpc	rxrpc: convert to getsockopt_iter	2026-05-22 11:11:10 -07:00
sched	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
sctp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
shaper	net: shaper: rework the VALID marking (again)	2026-05-20 16:34:20 -07:00
smc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-05-28 14:02:21 -07:00
strparser	net: strparser: fix skb_head leak in strp_abort_strp()	2026-04-14 12:37:00 +02:00
sunrpc	nfsd-7.1 fixes:	2026-05-26 13:49:13 -07:00
switchdev	bridge: No DEV_PATH_BR_VLAN_UNTAG_HW for dsa foreign	2026-03-19 13:14:00 +01:00
tipc	tipc: convert to getsockopt_iter	2026-05-22 11:11:10 -07:00
tls	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-05-21 15:09:02 -07:00
unix	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
vmw_vsock	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
wireless	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
x25	x25: convert to getsockopt_iter	2026-05-10 10:11:08 -07:00
xdp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-04 15:29:04 -07:00
xfrm	xfrm: input: hold netns during deferred transport reinjection	2026-05-26 10:35:30 +02:00
compat.c	socket: Unify getsockname and getpeername implementation	2025-11-26 13:45:23 -07:00
devres.c
Kconfig	net: remove ax25 and amateur radio (hamradio) subsystem	2026-04-23 10:24:02 -07:00
Kconfig.debug
Makefile	net: remove ax25 and amateur radio (hamradio) subsystem	2026-04-23 10:24:02 -07:00
socket.c	net: socket: clean up __sys_accept4 comment	2026-05-19 19:22:41 -07:00
sysctl_net.c