Re: [PATCH net 01/12] netfilter: nft_reject: prevent unbounded recursion in output hooks

[patchwork-bot+netdevbpf@kernel.org]

Hello:

This series was applied to netdev/net.git (main)
by Pablo Neira Ayuso <pablo@netfilter.org>:

On Thu,  5 Nov 2026 13:45:25 +0100 you wrote:
> From: Fernando Fernandez Mancera <fmancera@suse.de>
> 
> nftables payload-mangling rules can rewrite packet contents (such as TCP
> flags) before they are evaluated by reject targets. This defeats the
> content-based loop guards, allowing unbounded hook recursion that leads
> to kernel stack exhaustion and panics.
> 
> [...]

Here is the summary with links:
  - [net,01/12] netfilter: nft_reject: prevent unbounded recursion in output hooks
    https://git.kernel.org/netdev/net/c/d6c18cadfc6c
  - [net,02/12] ipvs: Defer application parent freeing until after RCU readers
    https://git.kernel.org/netdev/net/c/1e0808008e44
  - [net,03/12] ipvs: fix protocol data lifetime during namespace teardown
    https://git.kernel.org/netdev/net/c/832aa3e89e80
  - [net,04/12] netfilter: nf_dup: preserve guard across NFQUEUE reinjection
    https://git.kernel.org/netdev/net/c/82052e5b5ec3
  - [net,05/12] netfilter: flowtable: extend ct timeout of offloaded GRE flows
    https://git.kernel.org/netdev/net/c/46ecda278f6e
  - [net,06/12] netfilter: nft_set_rbtree: check catchall_sync return before queue_done
    https://git.kernel.org/netdev/net/c/1cec19d70bc2
  - [net,07/12] netfilter: bridge: use DEBUG_NET_WARN_ON_ONCE in nf_ct_bridge_refrag()
    https://git.kernel.org/netdev/net/c/683ff28ab18a
  - [net,08/12] netfilter: x_tables: check target name before accessing verdict
    https://git.kernel.org/netdev/net/c/364b200285bb
  - [net,09/12] netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport()
    https://git.kernel.org/netdev/net/c/7af52bda65c0
  - [net,10/12] netfilter: nf_tables: fix memleak when rule deletion fails with hardware offload
    https://git.kernel.org/netdev/net/c/e95b3be75ae0
  - [net,11/12] netfilter: xt_recent: do not call remove_proc_entry() under recent_lock
    https://git.kernel.org/netdev/net/c/17c2e41736b6
  - [net,12/12] netfilter: nat: zero newrange before filling it in
    https://git.kernel.org/netdev/net/c/d1bb235aa409

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html