Pablo Neira Ayuso e75a9fa1d4 netfilter: flowtable: hold reference on ct until flow is released ... nf_ct_put() releases the ct->ext area inmediately, the rcu typesafe semantics also allow to refer to the wrong conntrack from the flowtable datapath. Hold reference on ct until flow is released after rcu grace period. Add rcu_barrier() on module exit path, to ensure pending flow entries are release before module goes away. Fixes: 0ff90b6c20 ("netfilter: nf_flow_offload: fix use-after-free and a resource leak") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2026-09-11 13:04:15 +02:00
..
6lowpan	net: 6lowpan: fix mismatched comments	2026-09-02 09:03:06 +02:00
9p	9p: Add missing read barrier in virtio zero-copy path	2026-06-21 05:22:57 +00:00
802	appletalk: move the protocol out of tree	2026-06-16 14:37:06 -07:00
8021q	vlan: fix skb_under_panic and races when toggling HW VLAN offload	2026-08-20 13:05:43 -07:00
atm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-08-06 11:53:47 -07:00
batman-adv	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
bluetooth	Nothing too exciting, usual stream of fixes.	2026-09-10 14:07:48 -07:00
bpf	bpf: Fix partial copy of non-linear test_run output	2026-06-21 17:55:06 -07:00
bridge	net: bridge: use option bits for CFM/MRP frame handlers	2026-09-08 17:48:49 -07:00
can	can: isotp: check register_netdevice_notifier() error in module init	2026-07-29 11:26:41 +02:00
ceph	libceph: remove pinning assertion in ceph_msg_data_iter_next()	2026-09-02 12:23:05 +02:00
core	net: reject oversized tx_queue_len at netlink parse time	2026-09-04 16:30:49 -07:00
dcb
devlink	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
dns_resolver	keys, dns: Drop unused NUL terminator from upayload->data	2026-08-10 16:20:42 -07:00
dsa	net: dsa: tag_brcm: legacy FCS: request needed tailroom	2026-09-09 13:31:08 -07:00
ethernet
ethtool	ethtool: tsconfig: reject zero-valued tx_type and rx_filter bitsets	2026-08-13 17:44:54 -07:00
handshake	handshake: Require admin permission for DONE command	2026-06-12 15:45:44 -07:00
hsr	net: hsr: enable promiscuous mode on interlink port with fwd offload	2026-09-10 08:45:00 -07:00
ieee802154	ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink	2026-09-02 09:54:27 +02:00
ife	net/sched: act_ife: Only operate on Ethernet frames	2026-08-24 11:59:59 -07:00
ipv4	Nothing too exciting, usual stream of fixes.	2026-09-10 14:07:48 -07:00
ipv6	ipmr: account multicast table and route memory	2026-09-10 08:48:44 -07:00
iucv	net/iucv: fix the recvmsg window update	2026-08-31 15:51:22 -07:00
kcm	net: kcm: Hold RCU read lock while running BPF parser	2026-08-17 13:43:58 -07:00
key	ipsec-2026-06-22	2026-06-23 16:22:24 -07:00
l2tp	net: l2tp: do not propagate multicast notification errors	2026-08-24 11:43:28 -07:00
l3mdev
lapb
llc	llc: fix SAP refcount leak when creating incoming sockets	2026-07-17 13:17:46 +02:00
mac80211	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
mac802154	mac802154: fix use-after-free of sdata via queued RX frames	2026-09-03 11:00:54 +02:00
mctp	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
mpls	Summary	2026-08-20 08:46:41 -07:00
mptcp	mptcp: avoid pruning for OoW data	2026-09-09 13:32:56 -07:00
ncsi	net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length	2026-08-05 17:24:57 -07:00
netfilter	netfilter: flowtable: hold reference on ct until flow is released	2026-09-11 13:04:15 +02:00
netlabel	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-11 14:33:35 -07:00
netlink	genetlink: pin family module during policy dump	2026-09-03 17:21:35 -07:00
nfc	nfc: nci: free destination parameters when closing a connection	2026-08-11 18:10:04 +02:00
nsh
openvswitch	openvswitch: fix wrong flag value in get_ipv6_ext_hdrs()	2026-09-10 08:51:30 -07:00
packet	af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().	2026-09-01 10:42:56 +02:00
phonet	phonet: pep: convert getsockopt to sockopt_t	2026-08-03 16:55:23 -07:00
psample	net: psample: fix info leak in PSAMPLE_ATTR_DATA	2026-06-17 16:35:50 -07:00
psp	psp: use unrcu_pointer() for the cmpxchg() on netdev psp_dev	2026-08-17 11:06:14 -07:00
qrtr	net: qrtr: Send HELLO message on endpoint register	2026-09-02 12:14:32 +01:00
rds	Nothing too exciting, usual stream of fixes.	2026-09-10 14:07:48 -07:00
rfkill	Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)	2026-07-03 07:38:17 +02:00
rxrpc	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
sched	Nothing too exciting, usual stream of fixes.	2026-09-10 14:07:48 -07:00
sctp	sctp: validate chunk length in the inqueue parser	2026-08-30 14:17:53 -07:00
shaper	net: shaper: add a note that we expect cap dumps to be tiny	2026-06-11 12:55:23 +02:00
smc	Including fixes from Bluetooth, IPSec and Netfilter.	2026-08-27 13:53:43 -07:00
strparser
sunrpc	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
switchdev
tipc	tipc: Dont send random pad bytes in RESET/ACTIVATE messages	2026-08-31 20:02:36 -07:00
tls	tls: device: fix out-of-bounds write in tls_append_frag()	2026-08-25 10:04:02 +02:00
unix	Nothing too exciting, usual stream of fixes.	2026-09-10 14:07:48 -07:00
vmw_vsock	vsock/vmci: validate packet source for connected sockets	2026-08-31 16:50:54 -07:00
wireless	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
x25	net/x25: fix use-after-free of the socket by its timers	2026-07-30 18:46:45 -07:00
xdp	xsk: honor XDP_TX_METADATA in zero-copy path	2026-08-24 11:12:00 -07:00
xfrm	ipsec-2026-08-18	2026-08-20 11:38:14 -07:00
compat.c	net: af_unix: useful handling of LSM denials on SCM_RIGHTS	2026-08-17 18:14:52 -07:00
devres.c
Kconfig	appletalk: move the protocol out of tree	2026-06-16 14:37:06 -07:00
Kconfig.debug
Makefile	appletalk: move the protocol out of tree	2026-06-16 14:37:06 -07:00
socket.c	Major changes:	2026-08-20 07:36:20 -07:00
sysctl_net.c	net: enforce net sysctl registration	2026-08-13 13:12:21 +02:00