|
WARNING in br_nf_local_in
bridge
netfilter
|
-1 |
|
|
|
1 |
96d |
92d
|
29/29 |
37d |
netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
|
|
WARNING in nf_reject_fill_skb_dst
netfilter
|
-1 |
C |
done |
|
214 |
98d |
111d
|
29/29 |
58d |
netfilter: nf_reject: don't leak dst refcount for loopback packets
|
|
WARNING in nf_send_reset6
netfilter
|
-1 |
C |
|
|
9 |
102d |
110d
|
29/29 |
58d |
netfilter: nf_reject: don't leak dst refcount for loopback packets
|
|
WARNING in nf_send_unreach6
netfilter
|
-1 |
|
|
|
508 |
98d |
112d
|
29/29 |
58d |
netfilter: nf_reject: don't leak dst refcount for loopback packets
|
|
WARNING in nft_socket_init (2)
netfilter
|
-1 |
C |
done |
|
6 |
120d |
138d
|
29/29 |
62d |
1dee968d22ea
netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
|
|
WARNING in ip_mr_output
netfilter
|
-1 |
C |
error |
|
74 |
163d |
166d
|
29/29 |
97d |
beead7eea896
net: ipv4: guard ip_mr_output() with rcu
|
|
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry
netfilter
|
17 |
C |
done |
|
7 |
147d |
145d
|
29/29 |
97d |
bf58e667af7d
netfilter: xt_nfacct: don't assume acct name is null-terminated
|
|
KMSAN: uninit-value in nf_flow_offload_inet_hook (2)
netfilter
|
7 |
C |
|
|
13 |
154d |
156d
|
29/29 |
97d |
18cdb3d982da
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
|
|
BUG: assuming non migratable context at ./include/linux/filter.h:LINE
netfilter
|
-1 |
C |
done |
|
1189 |
109d |
146d
|
29/29 |
97d |
17ce3e5949bc
bpf: Disable migration in nf_hook_run_bpf().
|
|
WARNING in dev_setup_tc
netfilter
|
-1 |
|
|
|
38 |
272d |
277d
|
28/29 |
183d |
0a13c1e0a449
net: revert to lockless TC_SETUP_BLOCK and TC_SETUP_FT
|
|
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2)
netfilter
|
19 |
syz |
|
|
1 |
283d |
283d
|
28/29 |
183d |
fb8286562ecf
netfilter: nf_tables: make destruction work queue pernet
|
|
KMSAN: uninit-value in __nf_conncount_add
netfilter
|
7 |
|
|
|
1 |
280d |
276d
|
28/29 |
183d |
d653bfeb07eb
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
|
|
WARNING in __nf_unregister_net_hook (8)
netfilter
|
-1 |
|
|
|
2 |
242d |
254d
|
28/29 |
183d |
688c15017d5c
netfilter: nf_tables: don't unregister hook when table is dormant
|
|
WARNING in nft_socket_init
netfilter
|
-1 |
C |
done |
|
14 |
312d |
380d
|
28/29 |
218d |
b7529880cb96
netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
|
|
KASAN: slab-out-of-bounds Read in led_tg_check
netfilter
|
17 |
C |
done |
|
5 |
374d |
384d
|
28/29 |
218d |
04317f4eb2aa
netfilter: x_tables: fix LED ID check in led_tg_check()
|
|
BUG: using smp_processor_id() in preemptible code in nft_inner_eval
netfilter
|
4 |
|
|
|
2 |
384d |
383d
|
28/29 |
218d |
7b1d83da254b
netfilter: nft_inner: incorrect percpu area handling under softirq
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2)
netfilter
|
17 |
C |
|
|
3 |
397d |
393d
|
28/29 |
359d |
35f56c554eb1
netfilter: ipset: add missing range check in bitmap_ip_uadt
|
|
KCSAN: assert: race in dequeue_entities
netfilter
audit
|
14 |
|
|
|
2118 |
402d |
439d
|
28/29 |
391d |
b55945c500c5
sched: Fix pick_next_task_fair() vs try_to_wake_up() race
|
|
WARNING in xt_cluster_mt (2)
netfilter
|
-1 |
C |
inconclusive |
|
5 |
434d |
433d
|
28/29 |
392d |
0bfcb7b71e73
netfilter: xtables: avoid NFPROTO_UNSPEC where needed
|
|
BUG: using __this_cpu_write() in preemptible code in nf_dup_ipv4
netfilter
|
4 |
|
|
|
1 |
450d |
450d
|
28/29 |
392d |
92ceba94de6f
netfilter: nf_tables: prevent nf_skb_duplicated corruption
|
|
INFO: task hung in ip_tunnel_init_net (3)
netfilter
|
1 |
|
|
|
41 |
393d |
425d
|
28/29 |
392d |
a1494d532e28
netdevsim: use cond_resched() in nsim_dev_trap_report_work()
|
|
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put
netfilter
|
7 |
C |
|
|
136 |
439d |
453d
|
28/29 |
414d |
9c778fe48d20
UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
|
|
KASAN: slab-use-after-free Read in ip6_send_skb
netfilter
|
19 |
|
|
|
1 |
479d |
479d
|
28/29 |
426d |
faa389b2fbaa
ipv6: prevent UAF in ip6_send_skb()
|
|
KMSAN: uninit-value in nf_flow_offload_inet_hook
netfilter
|
7 |
|
|
|
4 |
478d |
488d
|
28/29 |
433d |
6ea14ccb60c8
netfilter: flowtable: validate vlan header
|
|
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work
netfilter
|
19 |
C |
error |
|
147 |
519d |
526d
|
26/29 |
491d |
9f6958ba2e90
netfilter: nf_tables: unconditionally flush pending work before notifier
|
|
net-next test error: WARNING: suspicious RCU usage in _destroy_all_sets
netfilter
|
-1 |
|
|
|
128 |
538d |
544d
|
26/29 |
519d |
8ecd06277a76
netfilter: ipset: Fix suspicious rcu_dereference_protected()
|
|
upstream test error: WARNING: suspicious RCU usage in _destroy_all_sets
netfilter
|
-1 |
|
|
|
293 |
538d |
544d
|
26/29 |
519d |
8ecd06277a76
netfilter: ipset: Fix suspicious rcu_dereference_protected()
|
|
general protection fault in nf_tproxy_laddr4
netfilter
|
8 |
C |
error |
|
5 |
567d |
576d
|
25/29 |
547d |
21a673bddc8f
netfilter: tproxy: bail out if IP has been disabled on the device
|
|
WARNING: suspicious RCU usage in nfqnl_reinject
netfilter
|
4 |
|
|
|
2 |
557d |
574d
|
25/29 |
547d |
dc21c6cc3d69
netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
|
|
KASAN: slab-use-after-free Read in ip_skb_dst_mtu
netfilter
|
19 |
C |
error |
|
5 |
612d |
644d
|
25/29 |
566d |
18685451fc4e
inet: inet_defrag: prevent sk release while still in use
|
|
KASAN: slab-out-of-bounds Read in update_counters
netfilter
bridge
|
17 |
C |
|
|
3 |
613d |
613d
|
25/29 |
566d |
0c83842df40f
netfilter: validate user input for expected length
|
|
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl
netfilter
|
17 |
C |
|
|
111 |
604d |
615d
|
25/29 |
566d |
0c83842df40f
netfilter: validate user input for expected length
|
|
KMSAN: uninit-value in xt_check_entry_offsets
netfilter
|
7 |
|
|
|
1 |
610d |
610d
|
25/29 |
566d |
65acf6e0501a
netfilter: complete validation of user input
|
|
KMSAN: uninit-value in nf_flow_offload_ip_hook
netfilter
|
7 |
C |
|
|
5 |
614d |
615d
|
25/29 |
566d |
87b3593bed18
netfilter: flowtable: validate pppoe header
|
|
WARNING: ODEBUG bug in ip_set_free
netfilter
|
-1 |
C |
|
|
42 |
663d |
666d
|
25/29 |
623d |
27c5a095e251
netfilter: ipset: Missing gc cancellations fixed
|
|
WARNING: ODEBUG bug in hash_netiface4_destroy
netfilter
|
-1 |
C |
done |
|
80 |
663d |
677d
|
25/29 |
623d |
27c5a095e251
netfilter: ipset: Missing gc cancellations fixed
|
|
KMSAN: uninit-value in __nla_validate_parse (3)
netfilter
|
17 |
|
|
|
24 |
637d |
659d
|
25/29 |
623d |
9a0d18853c28
netlink: add nla be16/32 types to minlen array
|
|
WARNING in __nf_unregister_net_hook (6)
netfilter
|
-1 |
C |
error |
|
2 |
668d |
785d
|
25/29 |
624d |
bccebf647017
netfilter: nf_tables: set dormant flag on hook register failure
|
|
inconsistent lock state in nf_connlabels_put
netfilter
|
4 |
C |
done |
|
4 |
776d |
777d
|
25/29 |
707d |
643d12603664
netfilter: conntrack: switch connlabels to atomic_t
|
|
WARNING: proc registration bug in clusterip_tg_check (3)
netfilter
|
-1 |
C |
done |
inconclusive |
9 |
1055d |
1589d
|
22/29 |
916d |
9db5d918e2c0
netfilter: ip_tables: remove clusterip target
|
|
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table
bridge
netfilter
|
17 |
C |
error |
|
4 |
1026d |
1027d
|
22/29 |
916d |
e58a171d35e3
netfilter: ebtables: fix table blob use-after-free
|
|
INFO: task hung in nfnetlink_rcv_msg (3)
netfilter
|
1 |
C |
done |
|
5 |
1096d |
1107d
|
22/29 |
916d |
5e29dc36bd5e
netfilter: ipset: Rework long task execution when adding/deleting entries
|
|
KASAN: slab-out-of-bounds Read in cttimeout_net_exit
netfilter
|
17 |
C |
|
|
1444 |
1265d |
1302d
|
22/29 |
1020d |
aeed55a08d0b
netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit
394e771684f7
netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
|
|
kernel panic: corrupted stack end in inet6_sendmsg
netfilter
|
2 |
|
|
|
1 |
1168d |
1168d
|
22/29 |
1020d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KASAN: use-after-free Read in nf_hook_entries_grow
netfilter
|
19 |
C |
done |
done |
5 |
1410d |
1451d
|
22/29 |
1020d |
6069da443bf6
netfilter: nf_tables: unregister flowtable hooks on netns exit
|
|
UBSAN: array-index-out-of-bounds in nfnetlink_unbind
netfilter
|
17 |
C |
done |
|
6621 |
1286d |
1303d
|
22/29 |
1020d |
ffd219efd9ee
netfilter: nfnetlink: fix warn in nfnetlink_unbind
|
|
kernel panic: corrupted stack end in tcp_setsockopt
netfilter
|
2 |
|
|
|
3 |
1125d |
1274d
|
22/29 |
1020d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KASAN: use-after-free Read in nf_confirm
netfilter
|
19 |
C |
done |
|
605 |
1286d |
1303d
|
22/29 |
1020d |
56b14ecec97f
netfilter: conntrack: re-fetch conntrack after insertion
|
|
KASAN: use-after-free Read in nf_tables_trans_destroy_work
netfilter
|
19 |
C |
done |
|
6 |
1150d |
1157d
|
22/29 |
1020d |
d4bc8271db21
netfilter: nf_tables: netlink notifier might race to release objects
26b5934ff419
netfilter: nf_tables: release flow rule object from commit path
|
|
WARNING in nf_tables_exit_net
netfilter
|
-1 |
C |
error |
|
3 |
1138d |
1138d
|
22/29 |
1020d |
03c1f1ef1584
netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
|
|
memory leak in nft_chain_parse_hook
netfilter
|
3 |
C |
|
|
1 |
1202d |
1198d
|
22/29 |
1020d |
77972a36ecc4
netfilter: nf_tables: clean up hook list when offload flags check fails
|
|
KASAN: use-after-free Read in __nf_register_net_hook
netfilter
|
19 |
C |
error |
|
5 |
1382d |
1382d
|
22/29 |
1020d |
56763f12b0f0
netfilter: fix use-after-free in __nf_register_net_hook()
|
|
memory leak in do_replace
bridge
netfilter
|
3 |
C |
|
|
1 |
1181d |
1177d
|
22/29 |
1020d |
62ce44c4fff9
netfilter: ebtables: fix memory leak when blob is malformed
|
|
WARNING in nfnetlink_unbind
netfilter
|
-1 |
C |
done |
|
235 |
1286d |
1303d
|
22/29 |
1020d |
ffd219efd9ee
netfilter: nfnetlink: fix warn in nfnetlink_unbind
|
|
WARNING: suspicious RCU usage in nft_do_chain
netfilter
|
4 |
|
|
|
1 |
1381d |
1381d
|
22/29 |
1020d |
17a8f31bba7b
netfilter: egress: silence egress hook lockdep splats
|
|
WARNING: kmalloc bug in hash_ip_create
netfilter
|
-1 |
C |
done |
|
641 |
1531d |
1558d
|
20/29 |
1373d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
KASAN: use-after-free Read in nft_table_lookup (2)
netfilter
|
19 |
syz |
done |
|
1 |
1553d |
1549d
|
20/29 |
1373d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get (3)
netfilter
|
6 |
|
|
|
2 |
1464d |
1464d
|
20/29 |
1373d |
802a7dc5cf1b
netfilter: conntrack: annotate data-races around ct->timeout
|
|
WARNING: kmalloc bug in hash_net_create
netfilter
|
-1 |
C |
done |
|
283 |
1532d |
1558d
|
20/29 |
1373d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
WARNING: kmalloc bug in nf_tables_newset
netfilter
|
-1 |
C |
done |
|
95 |
1531d |
1558d
|
20/29 |
1373d |
45928afe94a0
netfilter: nf_tables: Fix oversized kvmalloc() calls
|
|
WARNING: kmalloc bug in hash_mac_create
netfilter
|
-1 |
C |
done |
|
11 |
1552d |
1556d
|
20/29 |
1373d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
KASAN: use-after-free Read in nft_set_destroy
netfilter
|
19 |
|
|
|
1 |
1458d |
1458d
|
20/29 |
1373d |
0f7d9b31ce7a
netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
|
|
INFO: task can't die in nf_ct_iterate_cleanup (2)
netfilter
|
1 |
|
|
|
1 |
1545d |
1545d
|
20/29 |
1373d |
e9edc188fc76
netfilter: conntrack: serialize hash resizes and cleanups
|
|
KASAN: use-after-free Read in nf_tables_dump_sets
netfilter
|
19 |
syz |
done |
done |
1 |
1555d |
1584d
|
20/29 |
1373d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
WARNING in __nf_unregister_net_hook (4)
netfilter
|
-1 |
C |
error |
|
66 |
1375d |
1705d
|
20/29 |
1373d |
68a3765c659f
netfilter: nf_tables: skip netdev events generated on netns removal
|
|
general protection fault in nf_tables_dump_tables
netfilter
|
2 |
syz |
done |
done |
4 |
1537d |
1537d
|
20/29 |
1373d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
WARNING in destroy_conntrack
netfilter
|
-1 |
C |
done |
|
1 |
1586d |
1584d
|
20/29 |
1491d |
e3245a7b7b34
netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
|
|
WARNING: suspicious RCU usage in get_counters (2)
netfilter
|
4 |
|
|
|
1 |
1627d |
1627d
|
20/29 |
1491d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in gc_worker
netfilter
|
4 |
|
|
|
3 |
1646d |
1672d
|
20/29 |
1491d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
divide error in nft_limit_init
netfilter
|
2 |
C |
done |
|
4 |
1704d |
1706d
|
20/29 |
1491d |
b895bdf5d643
netfilter: nft_limit: avoid possible divide error in nft_limit_init
|
|
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user
netfilter
|
23 |
C |
error |
error |
1 |
1942d |
1941d
|
20/29 |
1491d |
b29c457a6511
netfilter: x_tables: fix compat match/target pad out-of-bound write
|
|
WARNING: suspicious RCU usage in vfree
netfilter
|
4 |
|
|
|
1 |
1666d |
1666d
|
20/29 |
1491d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
BUG: sleeping function called from invalid context in __alloc_skb
netfilter
|
5 |
C |
done |
|
33 |
1539d |
1680d
|
20/29 |
1491d |
7072a355ba19
netfilter: nfnetlink: add a missing rcu_read_unlock()
|
|
net-next test error: WARNING in __nf_unregister_net_hook
netfilter
|
-1 |
|
|
|
42 |
1677d |
1688d
|
20/29 |
1491d |
43016d02cf6e
netfilter: arptables: use pernet ops struct during unregister
|
|
upstream test error: WARNING in corrupted
netfilter
|
-1 |
|
|
|
1 |
1677d |
1677d
|
20/29 |
1491d |
43016d02cf6e
netfilter: arptables: use pernet ops struct during unregister
|
|
UBSAN: shift-out-of-bounds in nft_hash_estimate
netfilter
|
-1 |
C |
done |
|
3 |
1680d |
1680d
|
20/29 |
1491d |
a54754ec9891
netfilter: nftables: avoid overflows in nft_hash_buckets()
|
|
linux-next test error: WARNING in __nf_unregister_net_hook
netfilter
|
-1 |
|
|
|
21 |
1682d |
1684d
|
20/29 |
1491d |
43016d02cf6e
netfilter: arptables: use pernet ops struct during unregister
|
|
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu
netfilter
|
24 |
C |
done |
|
3 |
1586d |
1586d
|
20/29 |
1491d |
e3245a7b7b34
netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
|
|
general protection fault in nft_set_elem_expr_alloc
netfilter
|
2 |
C |
done |
|
3 |
1655d |
1652d
|
20/29 |
1491d |
ad9f151e560b
netfilter: nf_tables: initialize set before expression setup
|
|
WARNING: suspicious RCU usage in __clear_user
netfilter
|
4 |
|
|
|
1 |
1660d |
1660d
|
20/29 |
1491d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
kernel BUG at lib/string.c:LINE! (6)
netfilter
|
-1 |
C |
done |
|
2 |
1818d |
1814d
|
19/29 |
1736d |
6cb56218ad9e
netfilter: xt_RATEEST: reject non-null terminated string from userspace
|
|
UBSAN: shift-out-of-bounds in hash_mac_create
netfilter
|
-1 |
C |
unreliable |
|
29 |
1803d |
1822d
|
19/29 |
1736d |
5c8193f568ae
netfilter: ipset: fix shift-out-of-bounds in htable_bits()
|
|
memory leak in nf_tables_addchain
netfilter
|
3 |
C |
|
|
1 |
1949d |
1947d
|
15/29 |
1910d |
59136aa3b264
netfilter: nf_tables: free chain context when BINDING flag is missing
|
|
WARNING in compat_do_ebt_get_ctl
bridge
netfilter
|
-1 |
C |
done |
|
15 |
1940d |
1951d
|
15/29 |
1910d |
5c04da55c754
netfilter: ebtables: reject bogus getopt len value
|
|
WARNING in __nf_unregister_net_hook (2)
netfilter
|
-1 |
C |
done |
|
9 |
1977d |
1975d
|
15/29 |
1910d |
1e9451cbda45
netfilter: nf_tables: fix nat hook table deletion
|
|
invalid opcode in __phys_addr (2)
netfilter
|
2 |
|
|
|
1 |
1990d |
1990d
|
15/29 |
1954d |
c4e8fa9074ad
netfilter: ipset: call ip_set_free() instead of kfree()
|
|
memory leak in ctnetlink_del_conntrack
netfilter
|
3 |
C |
|
|
1 |
2012d |
2009d
|
15/29 |
1972d |
6c2d2176a85e
netfilter: ctnetlink: memleak in filter initialization error path
|
|
memory leak in nf_tables_parse_netdev_hooks (3)
netfilter
|
3 |
C |
|
|
1 |
2012d |
2009d
|
15/29 |
1972d |
3003055f5066
netfilter: nf_tables: hook list memleak in flowtable deletion
|
|
BUG: unable to handle kernel NULL pointer dereference in local_bh_disable
netfilter
|
10 |
|
|
|
1 |
2002d |
2002d
|
15/29 |
1972d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KASAN: invalid-free in nf_tables_newset
netfilter
|
22 |
C |
done |
|
21 |
2064d |
2079d
|
15/29 |
2001d |
7fb6f78df700
netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
|
|
WARNING in nf_nat_unregister_fn
netfilter
|
-1 |
|
|
|
1 |
2064d |
2063d
|
15/29 |
2001d |
b4faef1739dd
netfilter: nat: fix error handling upon registering inet hook
|
|
INFO: task hung in hashlimit_net_exit
netfilter
|
1 |
syz |
done |
|
53 |
2119d |
2127d
|
15/29 |
2065d |
8d0015a7ab76
netfilter: xt_hashlimit: limit the max size of hashtable
|
|
WARNING: proc registration bug in hashlimit_mt_check_common
netfilter
|
-1 |
C |
done |
|
320 |
2104d |
2130d
|
15/29 |
2065d |
99b79c3900d4
netfilter: xt_hashlimit: unregister proc file before releasing mutex
|
|
INFO: rcu detected stall in ip_set_uadd
netfilter
|
1 |
C |
done |
|
11 |
2109d |
2146d
|
15/29 |
2065d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
|
memory leak in nf_tables_parse_netdev_hooks (2)
netfilter
|
3 |
C |
|
|
2 |
2104d |
2109d
|
15/29 |
2065d |
2d285f26ecd0
netfilter: nf_tables: free flowtable hooks on hook register error
|
|
INFO: rcu detected stall in ip_set_udel
netfilter
|
1 |
C |
done |
|
12 |
2124d |
2146d
|
15/29 |
2065d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
|
general protection fault in ip_set_comment_free
netfilter
|
2 |
C |
done |
|
19 |
2108d |
2145d
|
15/29 |
2065d |
8af1c6fbd923
netfilter: ipset: Fix forceadd evaluation path
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_add
netfilter
|
17 |
syz |
done |
done |
7 |
2141d |
2152d
|
15/29 |
2085d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
general protection fault in __nf_tables_chain_type_lookup
netfilter
|
2 |
|
|
|
1 |
2150d |
2150d
|
15/29 |
2092d |
826035498ec1
netfilter: nf_tables: add __nft_chain_type_get()
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup
netfilter
|
17 |
C |
done |
done |
8 |
2135d |
2151d
|
15/29 |
2093d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup
netfilter
|
17 |
C |
done |
done |
10 |
2144d |
2152d
|
15/29 |
2093d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy
netfilter
|
17 |
C |
done |
done |
2 |
2147d |
2146d
|
15/29 |
2093d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup
netfilter
|
17 |
C |
unreliable |
done |
15 |
2135d |
2151d
|
15/29 |
2093d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_destroy
netfilter
|
17 |
C |
done |
done |
2 |
2147d |
2147d
|
15/29 |
2093d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_ip_ext_cleanup
netfilter
|
19 |
C |
done |
done |
2 |
2151d |
2152d
|
15/29 |
2117d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup
netfilter
|
19 |
C |
done |
done |
2 |
2151d |
2151d
|
15/29 |
2117d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Write in bitmap_ip_del
netfilter
|
23 |
C |
done |
done |
7 |
2149d |
2151d
|
15/29 |
2117d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_ip_destroy
netfilter
|
19 |
C |
done |
done |
1 |
2151d |
2151d
|
15/29 |
2121d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
WARNING in nft_request_module
netfilter
|
-1 |
C |
done |
|
7 |
2155d |
2155d
|
15/29 |
2122d |
9332d27d7918
netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_list
netfilter
|
17 |
C |
|
|
85 |
2137d |
2153d
|
15/29 |
2122d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_port_ext_cleanup
netfilter
|
19 |
C |
done |
|
11 |
2152d |
2161d
|
15/29 |
2122d |
c120959387ef
netfilter: fix a use-after-free in mtype_destroy()
|
|
KASAN: use-after-free Read in __nf_tables_abort
netfilter
|
19 |
C |
done |
|
3 |
2149d |
2151d
|
15/29 |
2122d |
eb014de4fd41
netfilter: nf_tables: autoload modules from the abort path
|
|
WARNING: suspicious RCU usage in find_set_and_id
netfilter
|
4 |
syz |
done |
|
6 |
2147d |
2149d
|
15/29 |
2122d |
5038517119d5
netfilter: ipset: fix suspicious RCU usage in find_set_and_id
|
|
BUG: corrupted list in nft_obj_del
netfilter
|
8 |
C |
done |
|
7 |
2153d |
2155d
|
15/29 |
2122d |
335178d5429c
netfilter: nf_tables: fix flowtable list del corruption
|
|
BUG: corrupted list in nf_tables_commit
netfilter
|
8 |
C |
done |
|
8 |
2155d |
2155d
|
15/29 |
2122d |
335178d5429c
netfilter: nf_tables: fix flowtable list del corruption
|
|
general protection fault in dccp_timeout_nlattr_to_obj
netfilter
|
2 |
C |
done |
|
7 |
2162d |
2164d
|
15/29 |
2122d |
1d9a7acd3d1e
netfilter: conntrack: dccp, sctp: handle null timeout argument
|
|
general protection fault in nft_parse_register
netfilter
|
2 |
|
|
|
1 |
2153d |
2153d
|
15/29 |
2122d |
7eaecf7963c1
netfilter: nft_osf: add missing check for DREG attribute
|
|
general protection fault in xt_rateest_tg_checkentry
netfilter
|
2 |
C |
done |
|
12 |
2165d |
2175d
|
15/29 |
2122d |
1b789577f655
netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
|
|
general protection fault in hash_netiface6_uadt
netfilter
|
2 |
|
|
|
1 |
2161d |
2161d
|
15/29 |
2122d |
22dad713b8a5
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
|
|
general protection fault in xt_rateest_put
netfilter
|
2 |
C |
done |
|
97 |
2152d |
2160d
|
15/29 |
2122d |
212e7f56605e
netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
|
|
general protection fault in hash_netnet6_uadt
netfilter
|
2 |
|
|
|
1 |
2162d |
2162d
|
15/29 |
2122d |
22dad713b8a5
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
|
|
memory leak in nf_tables_parse_netdev_hooks
netfilter
|
3 |
C |
|
|
6 |
2125d |
2155d
|
15/29 |
2122d |
cd77e75b5e46
netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks()
|
|
general protection fault in hash_ipmark6_uadt
netfilter
|
2 |
|
|
|
2 |
2161d |
2162d
|
15/29 |
2122d |
22dad713b8a5
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
|
|
general protection fault in nft_chain_parse_hook
netfilter
|
2 |
C |
done |
|
48 |
2141d |
2155d
|
15/29 |
2122d |
826035498ec1
netfilter: nf_tables: add __nft_chain_type_get()
|
|
WARNING in nf_tables_table_destroy
netfilter
|
-1 |
C |
done |
done |
1 |
2153d |
2153d
|
15/29 |
2122d |
eb014de4fd41
netfilter: nf_tables: autoload modules from the abort path
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_gc
netfilter
|
17 |
C |
done |
|
15 |
2134d |
2153d
|
15/29 |
2122d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
general protection fault in nft_tunnel_get_init
netfilter
|
2 |
C |
done |
|
7 |
2155d |
2155d
|
15/29 |
2122d |
1c702bf902bd
netfilter: nft_tunnel: fix null-attribute check
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_add
netfilter
|
17 |
syz |
done |
|
9 |
2146d |
2153d
|
15/29 |
2122d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_test
netfilter
|
17 |
syz |
|
|
10 |
2142d |
2153d
|
15/29 |
2122d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
general protection fault in hash_ipportnet4_uadt
netfilter
|
2 |
C |
done |
|
13 |
2161d |
2164d
|
15/29 |
2122d |
22dad713b8a5
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_list
netfilter
|
17 |
C |
|
|
152 |
2145d |
2153d
|
15/29 |
2122d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_port_destroy
netfilter
|
19 |
C |
|
|
1 |
2153d |
2153d
|
15/29 |
2122d |
c120959387ef
netfilter: fix a use-after-free in mtype_destroy()
|
|
KMSAN: uninit-value in br_nf_forward_arp (3)
bridge
netfilter
|
7 |
|
|
|
2 |
2202d |
2195d
|
15/29 |
2126d |
5604285839aa
net-backports: netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
|
|
KASAN: vmalloc-out-of-bounds Read in compat_copy_entries
bridge
netfilter
|
17 |
C |
done |
|
3 |
2187d |
2187d
|
15/29 |
2126d |
e608f631f0ba
netfilter: ebtables: compat: reject all padding in matches/watchers
|
|
KMSAN: uninit-value in nf_conntrack_tcp_packet
netfilter
|
7 |
syz |
|
|
3 |
2197d |
2200d
|
15/29 |
2163d |
9424e2e7ad93
net-backports: tcp: md5: fix potential overestimation of TCP option space
|
|
KCSAN: data-race in ip_finish_output2 / ip_finish_output2
netfilter
|
6 |
|
|
|
26 |
2193d |
2238d
|
15/29 |
2189d |
25c7a6d1f90e
net: avoid potential false sharing in neighbor related code
|
|
KASAN: use-after-free Read in nf_ct_deliver_cached_events
netfilter
|
19 |
C |
done |
|
169 |
2235d |
2241d
|
15/29 |
2189d |
ad88b7a6aa3e
netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks
|
|
KCSAN: data-race in __nf_ct_refresh_acct / __nf_ct_refresh_acct
netfilter
|
6 |
|
|
|
2460 |
2228d |
2259d
|
13/29 |
2228d |
e37542ba111f
net-backports: netfilter: conntrack: avoid possible false sharing
|
|
WARNING in xt_compat_add_offset
netfilter
|
-1 |
C |
done |
|
18 |
2319d |
2483d
|
12/29 |
2297d |
3b48300d5cc7
netfilter: ebtables: also count base chain policies
|
|
net-next build error (2)
netfilter
|
-1 |
|
|
|
2 |
2385d |
2385d
|
12/29 |
2319d |
c9bb6165a16e
netfilter: nf_conntrack_bridge: fix CONFIG_IPV6=y
|
|
KASAN: use-after-free Read in brnf_exit_net
netfilter
bridge
|
19 |
syz |
done |
|
3 |
2363d |
2366d
|
12/29 |
2319d |
7e6daf50e1f4
netfilter: bridge: prevent UAF in brnf_exit_net()
|
|
general protection fault in nf_ct_gre_keymap_flush
netfilter
|
2 |
C |
|
|
22 |
2507d |
2513d
|
11/29 |
2449d |
ac088a88b5d5
netfilter: conntrack: fix error path in nf_conntrack_pernet_init()
|
|
INFO: rcu detected stall in netlink_sendmsg
netfilter
|
1 |
syz |
|
|
83 |
2487d |
2543d
|
11/29 |
2471d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING in cttimeout_default_get
netfilter
|
-1 |
C |
|
|
44 |
2561d |
2580d
|
11/29 |
2560d |
89259088c1b7
netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
|
|
general protection fault in icmp_timeout_obj_to_nlattr
netfilter
|
2 |
C |
|
|
13 |
2593d |
2597d
|
11/29 |
2584d |
8866df9264a3
netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr
|
|
general protection fault in ctnetlink_alloc_filter
netfilter
|
2 |
C |
|
|
80 |
2634d |
2637d
|
11/29 |
2584d |
9306425b70bf
netfilter: ctnetlink: must check mark attributes vs NULL
|
|
KMSAN: uninit-value in __nf_conntrack_find_get
netfilter
|
7 |
C |
|
|
67 |
2696d |
2703d
|
8/29 |
2681d |
6613b6173dee
netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
|
|
KMSAN: uninit-value in gc_worker
netfilter
|
7 |
|
|
|
10 |
2697d |
2708d
|
8/29 |
2681d |
6613b6173dee
netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
|
|
KMSAN: uninit-value in br_nf_forward_arp
netfilter
bridge
|
7 |
|
|
|
1 |
2749d |
2746d
|
8/29 |
2703d |
b84bbaf7a6c8
packet: in packet_snd start writing at link layer allocation
|
|
KMSAN: uninit-value in nfqnl_recv_config (2)
netfilter
|
7 |
C |
|
|
10 |
2724d |
2739d
|
8/29 |
2711d |
ba062ebb2cd5
netfilter: nf_queue: augment nfqa_cfg_policy
|
|
KMSAN: uninit-value in ebt_stp_mt_check (2)
netfilter
bridge
|
7 |
C |
|
|
222 |
2711d |
2743d
|
8/29 |
2711d |
c568503ef020
netfilter: x_tables: initialise match/target check parameter struct
|
|
WARNING in ebt_do_table
bridge
netfilter
|
-1 |
C |
|
|
13 |
2719d |
2744d
|
8/29 |
2711d |
11ff7288beb2
netfilter: ebtables: reject non-bridge targets
|
|
KASAN: stack-out-of-bounds Write in compat_copy_entries
bridge
netfilter
|
23 |
syz |
|
|
10 |
2748d |
2786d
|
5/29 |
2743d |
94c752f99954
netfilter: ebtables: handle string from userspace with care
|
|
KASAN: slab-out-of-bounds Read in nla_strlcpy
netfilter
|
17 |
C |
|
|
34 |
2747d |
2760d
|
5/29 |
2743d |
4b83a9049a98
netfilter: provide correct argument to nla_strlcpy()
|
|
KMSAN: uninit-value in ebt_stp_mt_check
bridge
netfilter
|
7 |
C |
|
|
211 |
2743d |
2788d
|
5/29 |
2743d |
a4995684a949
netfilter: bridge: stp fix reference to uninitialized data
|
|
KASAN: use-after-free Read in nla_strlcpy
netfilter
|
19 |
C |
|
|
59 |
2747d |
2760d
|
5/29 |
2743d |
4b83a9049a98
netfilter: provide correct argument to nla_strlcpy()
|
|
BUG: unable to handle kernel paging request in nla_strlcpy
netfilter
|
8 |
|
|
|
1 |
2751d |
2751d
|
5/29 |
2743d |
4b83a9049a98
netfilter: provide correct argument to nla_strlcpy()
|
|
KASAN: slab-out-of-bounds Read in clusterip_tg_check
netfilter
|
17 |
C |
|
|
22 |
2866d |
2873d
|
5/29 |
2767d |
1a38956cce5e
netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
|
|
INFO: trying to register non-static key in del_timer_sync
netfilter
|
-1 |
C |
|
|
89 |
2846d |
2873d
|
5/29 |
2767d |
10414014bc08
netfilter: x_tables: fix missing timer initialization in xt_LED
|
|
BUG: unable to handle kernel paging request in cgroup_mt_destroy_v1
netfilter
|
8 |
C |
|
|
3 |
2870d |
2869d
|
5/29 |
2768d |
ba7cd5d95f25
netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
|
|
KASAN: use-after-free Write in xt_rateest_put
netfilter
|
24 |
C |
|
|
7 |
2870d |
2872d
|
5/29 |
2768d |
7dc68e98757a
netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
|
|
KMSAN: uninit-value in iptable_mangle_hook
netfilter
|
7 |
C |
|
|
1134 |
2773d |
2804d
|
5/29 |
2773d |
b855ff827476
dccp: initialize ireq->ir_mark
|
|
KMSAN: uninit-value in ip6table_mangle_hook
netfilter
|
7 |
C |
|
|
601 |
2773d |
2804d
|
5/29 |
2773d |
b855ff827476
dccp: initialize ireq->ir_mark
|
|
BUG: unable to handle kernel paging request in compat_copy_entries
bridge
netfilter
|
8 |
syz |
|
|
5 |
2839d |
2837d
|
5/29 |
2786d |
b71812168571
netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
|
|
WARNING in xt_cluster_mt
netfilter
|
-1 |
C |
|
|
4 |
2843d |
2843d
|
5/29 |
2805d |
aebfa52a925d
netfilter: drop template ct when conntrack is skipped.
|
|
BUG: unable to handle kernel paging request in ebt_among_mt_check (2)
bridge
netfilter
|
8 |
C |
|
|
946 |
2819d |
2834d
|
4/29 |
2819d |
c8d70a700a5b
netfilter: bridge: ebt_among: add more missing match size checks
|
|
WARNING in __xlate_proc_name
netfilter
|
-1 |
C |
|
|
11 |
2837d |
2873d
|
4/29 |
2819d |
b1d0a5d0cba4
netfilter: x_tables: add and use xt_check_proc_name
|
|
WARNING in __proc_create
netfilter
|
-1 |
C |
|
|
12 |
2839d |
2832d
|
4/29 |
2819d |
b1d0a5d0cba4
netfilter: x_tables: add and use xt_check_proc_name
|
|
KASAN: slab-out-of-bounds Read in ip6_route_me_harder
netfilter
|
17 |
C |
|
|
66 |
2837d |
2845d
|
4/29 |
2836d |
7d98386d55a5
netfilter: use skb_to_full_sk in ip6_route_me_harder
|
|
BUG: unable to handle kernel paging request in ebt_among_mt_check
netfilter
bridge
|
8 |
C |
|
|
823 |
2836d |
2851d
|
4/29 |
2836d |
c4585a2823ed
netfilter: bridge: ebt_among: add missing match size checks
|
|
KASAN: use-after-free Read in ip6_route_me_harder
netfilter
|
19 |
C |
|
|
44 |
2837d |
2845d
|
4/29 |
2836d |
7d98386d55a5
netfilter: use skb_to_full_sk in ip6_route_me_harder
|
|
WARNING in compat_copy_entries
bridge
netfilter
|
-1 |
C |
|
|
434 |
2836d |
2851d
|
4/29 |
2836d |
b71812168571
netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
|
|
KASAN: use-after-free Write in nf_nat_ipv6_manip_pkt
netfilter
|
24 |
C |
|
|
2 |
2852d |
2851d
|
4/29 |
2836d |
b078556aecd7
netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
|
|
WARNING: ODEBUG bug in led_tg_destroy
netfilter
|
-1 |
C |
|
|
4 |
2849d |
2857d
|
4/29 |
2843d |
10414014bc08
netfilter: x_tables: fix missing timer initialization in xt_LED
|
|
WARNING in __queue_work
netfilter
|
-1 |
C |
|
|
1 |
2853d |
2853d
|
4/29 |
2843d |
cfc2c7405333
netfilter: IDLETIMER: be syzkaller friendly
|
|
WARNING: proc registration bug in clusterip_tg_check
netfilter
|
-1 |
C |
|
|
779 |
2846d |
2864d
|
4/29 |
2843d |
b3e456fce9f5
netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
|
|
general protection fault in ip6t_do_table
netfilter
|
2 |
C |
|
|
8077 |
2847d |
2873d
|
4/29 |
2843d |
57ebd808a97d
netfilter: add back stackpointer size checks
|
|
divide error in nf_nat_l4proto_unique_tuple
netfilter
|
2 |
C |
|
|
2 |
2858d |
2858d
|
4/29 |
2843d |
db57ccf0f2f4
netfilter: nat: cope with negative port range
|
|
WARNING: bad unlock balance in hashlimit_mt_common
netfilter
|
4 |
C |
|
|
2059 |
2846d |
2859d
|
4/29 |
2843d |
de526f401284
netfilter: xt_hashlimit: fix lock imbalance
|
|
kernel BUG at kernel/time/timer.c:LINE!
netfilter
|
-1 |
C |
|
|
18 |
2846d |
2858d
|
4/29 |
2843d |
10414014bc08
netfilter: x_tables: fix missing timer initialization in xt_LED
|
|
possible deadlock in do_ip_setsockopt (3)
netfilter
|
4 |
|
|
|
3731 |
2846d |
2862d
|
4/29 |
2843d |
01ea306f2ac2
netfilter: drop outermost socket lock in getsockopt()
|
|
possible deadlock in do_ipv6_setsockopt (2)
netfilter
|
4 |
|
|
|
3642 |
2846d |
2861d
|
4/29 |
2843d |
01ea306f2ac2
netfilter: drop outermost socket lock in getsockopt()
|
|
general protection fault in arpt_do_table
netfilter
|
2 |
C |
|
|
3 |
2848d |
2848d
|
4/29 |
2843d |
57ebd808a97d
netfilter: add back stackpointer size checks
|
|
possible deadlock in xt_find_table_lock (2)
netfilter
|
4 |
|
|
|
4 |
2861d |
2860d
|
4/29 |
2843d |
01ea306f2ac2
netfilter: drop outermost socket lock in getsockopt()
|
|
WARNING: ODEBUG bug in __queue_work
netfilter
|
-1 |
C |
|
|
2 |
2853d |
2849d
|
4/29 |
2843d |
cfc2c7405333
netfilter: IDLETIMER: be syzkaller friendly
|
|
possible deadlock in do_ip_getsockopt (2)
netfilter
|
4 |
|
|
|
206 |
2846d |
2861d
|
4/29 |
2843d |
01ea306f2ac2
netfilter: drop outermost socket lock in getsockopt()
|
|
KASAN: use-after-free Write in xt_rateest_tg_checkentry
netfilter
|
24 |
C |
|
|
2 |
2870d |
2872d
|
4/29 |
2858d |
7dc68e98757a
netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
|
|
general protection fault in cgroup_mt_destroy_v1
netfilter
|
2 |
C |
|
|
91 |
2860d |
2873d
|
4/29 |
2858d |
ba7cd5d95f25
netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
|
|
possible deadlock in do_ip_setsockopt (2)
netfilter
|
4 |
|
|
|
59 |
2863d |
2865d
|
4/29 |
2863d |
3f34cfae1238
netfilter: on sockopt() acquire sock lock only in the required scope
|
|
possible deadlock in xt_find_target
netfilter
|
4 |
|
|
|
34 |
2867d |
2873d
|
4/29 |
2865d |
3f34cfae1238
netfilter: on sockopt() acquire sock lock only in the required scope
|
|
possible deadlock in do_ip_getsockopt
netfilter
|
4 |
|
|
|
22 |
2868d |
2873d
|
4/29 |
2865d |
3f34cfae1238
netfilter: on sockopt() acquire sock lock only in the required scope
|
|
suspicious RCU usage at net/netfilter/ipset/ip_set_core.c:LINE
netfilter
|
-1 |
C |
|
|
38048 |
2890d |
2896d
|
4/29 |
2869d |
f998b6b10144
netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit()
|
|
general protection fault in get_info
netfilter
|
2 |
C |
|
|
760 |
2886d |
2888d
|
4/29 |
2869d |
e3eeacbac4ad
netfilter: x_tables: don't return garbage pointer on modprobe failure
|
|
general protection fault in nf_tables_dump_obj_done
netfilter
|
2 |
C |
|
|
976 |
2891d |
2897d
|
3/29 |
2882d |
8bea728dce89
netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()
|
|
kernel BUG at lib/string.c:LINE!
netfilter
|
-1 |
C |
|
|
73 |
2984d |
2999d
|
3/29 |
2969d |
e466af75c074
netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
|