Paolo Abeni 64ced6c088 netfilter pull request 26-06-10 ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEjF9xRqF1emXiQiqU1w0aZmrPKyEFAmopiokACgkQ1w0aZmrP KyGBoA//W6EXg8MCgQGojXZ4+41fPpJ6opw7t65e26/CIwTBgtOiX/no4WOJcOk/ J6WBk2sHIg+RgPPzzOLfzAeyVf7MfbnXvBnEMselFGOtd1o5LeikdcskuMIQ2GP/ v7a3C49Xueyp5ChjdArTbYcaREnAFVnmPGdsaE90D64SHNlmuiyIsRtEut+XUfuz Tl+JNCV2RCdSAl36MqnwAF8sBpj9ndnekNz8E5UONwgA7sowPM6KsGbYqCJrQXxa qDqbj9fme8BmLWc8gwQ37yD5iBGxc7LdVlyavIJ9uSi2Gp/jnDSsuyUm5WDo84wm R65jYmkXh9ZHr8OU/qYg5Mb0LBsSfNRzcE4WZIqb71WQ45IqA53kXam/2W0CuflN g9tPfAqboI9A11Mq3LSwwFWfa3L2xJIi1LFpzGThNTZa9vFoqhXZG0PCqXBKiDdo KsEmU4vtMFqga8tOFDJMgKHAxr/jPWhEZp1ZgIy3xAM2s9xC56Qe1g8mwcBFeZR7 n/YEFGpWFa83EnXGow1gdhUQHu+PYbiwQQy1tSVaZ+kg5WhA3ahnJfIopS2qIrHq NN1RP8m85YjSZGzF/gvq+BEuuYZsebeaFxYLDha0zrhqXA3vlRZvVxoySlJtW/bk m/05GsIb7ySpAyOjejJ9fokymzjD1op+0o69AnEqvg1IXUmE0oM= =Rg2q -----END PGP SIGNATURE----- Merge tag 'nf-26-06-10' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf Pablo Neira Ayuso says: ==================== Netfilter fixes for net The following patchset contains Netfilter fixes for net: 1) Revalidate bridge ports, add missing NULL checks to fetch the bridge device by the port. From Florian Westphal. 2) Fix netdevice refcount leak in the error path of nft_fwd hardware offload function, also from Florian. 3) Unregister helper expectfn callback on conntrack helper module removal, otherwise dangling pointer remains in place, from Weiming Shi. 4) Fix possible pointer infoleak in getsockopt() IPT_SO_GET_ENTRIES, From Kyle Zeng. 5) Validate that device MAC header is present before nf_syslog accesses it. From Xiang Mei. 6-8) Three patches to address a possible infoleak of stale stack data in three nf_tables expressions, due to mismatch in the _init() and _eval() function which is possible since 14fb07130c. From Davide Ornaghi and Florian Westphal. netfilter pull request 26-06-10 * tag 'nf-26-06-10' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf: netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register netfilter: nft_fib: fix stale stack leak via the OIFNAME register netfilter: nft_exthdr: fix register tracking for F_PRESENT flag netfilter: nf_log: validate MAC header was set before dumping it netfilter: x_tables: avoid leaking percpu counter pointers netfilter: nf_conntrack: destroy stale expectfn expectations on unregister netfilter: nf_tables_offload: drop device refcount on error netfilter: revalidate bridge ports ==================== Link: https://patch.msgid.link/20260610161629.214092-1-pablo@netfilter.org Signed-off-by: Paolo Abeni <pabeni@redhat.com>		2026-06-11 12:30:00 +02:00
..
acpi	ACPI: button: Enable wakeup GPEs for ACPI buttons at probe time	2026-05-25 09:52:34 +02:00
asm-generic	ring-buffer: Flush and stop persistent ring buffer on panic	2026-05-21 08:20:58 -04:00
clocksource
crypto	crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks	2026-05-20 16:36:45 -07:00
cxl
drm	Short summary of fixes pull:	2026-05-22 07:01:04 +10:00
dt-bindings
hyperv
keys
kunit	kunit: fix use-after-free in debugfs when using kunit.filter	2026-05-21 10:45:49 -06:00
kvm
linux	net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list	2026-06-08 18:56:18 -07:00
math-emu
media
memory
misc
net	netfilter pull request 26-06-10	2026-06-11 12:30:00 +02:00
pcmcia
ras
rdma	RDMA/core: Do not read wild stack memory in uverbs_get_handler_fn()	2026-05-19 19:32:48 -03:00
rv
scsi
soc
sound
target
trace	Including fixes from Bluetooth, wireless and netfilter.	2026-05-21 14:39:12 -07:00
uapi	soc: fixes for 7.1, part 2	2026-06-02 10:54:11 -07:00
ufs
vdso
video	fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free	2026-05-04 10:35:55 +02:00
xen	xen/arm: Replace __ASSEMBLY__ with __ASSEMBLER__ in interface.h	2026-05-12 17:31:38 +02:00
Kbuild