From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp-out.kfki.hu (smtp-out.kfki.hu [148.6.0.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 908BD3DF006 for ; Thu, 14 May 2026 08:55:29 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=148.6.0.51 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778748933; cv=none; b=Nz/1FQgQhG5mFyqHGBOBF28t9oiBveRZqvDxHnuQZuwS4thVUQ9ThIGxewlsC2rhJEqVSBLhsHyq2CTTMOtwE+5tzHrrNAHs3u+sx8D1eQrd8CZusVRMyYo0goWrQTN8W/OV5u+ffqzw3jctQBJp99tNSGLd2UK1GzseEKvWCdo= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778748933; c=relaxed/simple; bh=GIVTYDxJ6DV7A3rvHdAhpdi5/9h1g8LCYCkykTEkVPk=; h=From:To:Cc:Subject:Date:Message-Id:MIME-Version; b=p/4CiJuPWEF86RYqiu+JxpA+xIYGgn3cEMsI+kiWIHUoPTDATH4ri3y9G/2Bkx4LMQBDKszmI/2YuFMUsoHCzUZF9IlQJw+IH6QivoAJrLEThzp9LXZeq9Kr29Vi/IUMi1eJuiyMMAqgl+MB4YVyValBf4GO9UalpIX7oFLKW98= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=netfilter.org; spf=pass smtp.mailfrom=blackhole.kfki.hu; dkim=pass (1024-bit key) header.d=blackhole.kfki.hu header.i=@blackhole.kfki.hu header.b=hx9EJMTM; arc=none smtp.client-ip=148.6.0.51 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=netfilter.org Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=blackhole.kfki.hu Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=blackhole.kfki.hu header.i=@blackhole.kfki.hu header.b="hx9EJMTM" Received: from localhost (localhost [127.0.0.1]) by smtp2.kfki.hu (Postfix) with ESMTP id 4gGPL11WwCz7s861; Thu, 14 May 2026 10:55:21 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= blackhole.kfki.hu; h=mime-version:x-mailer:message-id:date:date :from:from:received:received:received; s=20151130; t=1778748919; x=1780563320; bh=/MKGs5J5c/vx1OTj4r5IZ90dmCtHbx1DsHKOH5AR8Lk=; b= hx9EJMTMLjoRuVy34EtAQVq6cbpx2HjHbnl1uaBmgMzo2RKGoWdE5aOEuW5tYxNi Tgk53/25kZAMhELG+w+XReDkrzlzCdyAKET+kmPV/jMDJuW2Y4/YGL1gmKzfFj74 lWM3qxQcDeWu8e7zdYRw5vhrs29kz2twkYo/JSjCN8E= X-Virus-Scanned: Debian amavis at smtp2.kfki.hu Received: from smtp2.kfki.hu ([127.0.0.1]) by localhost (smtp2.kfki.hu [127.0.0.1]) (amavis, port 10026) with ESMTP id wNh5d1q6-Slb; Thu, 14 May 2026 10:55:19 +0200 (CEST) Received: from mentat.rmki.kfki.hu (guest-144-149.eduroam.kfki.hu [148.6.144.149]) (Authenticated sender: kadlecsik.jozsef@wigner.hu) by smtp2.kfki.hu (Postfix) with ESMTPSA id 4gGPKz26LMz7s85w; Thu, 14 May 2026 10:55:19 +0200 (CEST) Received: by mentat.rmki.kfki.hu (Postfix, from userid 1000) id 006D9140A0F; Thu, 14 May 2026 10:55:19 +0200 (CEST) From: Jozsef Kadlecsik To: netfilter-devel@vger.kernel.org Cc: Pablo Neira Ayuso Subject: [PATCH v7 00/10] netfilter: ipset fixes Date: Thu, 14 May 2026 10:55:09 +0200 Message-Id: <20260514085519.12729-1-kadlec@netfilter.org> X-Mailer: git-send-email 2.39.5 Precedence: bulk X-Mailing-List: netfilter-devel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hi Pablo, Here follows the new revision of the fixes for the current list of ipset related issues. Let's see what else is lurking. Best regards, Jozsef Jozsef Kadlecsik (10): netfilter: ipset: fix a potential dump-destroy race netfilter: ipset: Fix data race between add and list header in all hash types netfilter: ipset: Fix data race between add and dump in all hash types netfilter: ipset: annotate "pos" for concurrent readers/writers netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() netfilter: ipset: skip gc when resize is in progress netfilter: ipset: fix potential torn read in reuse/forceadd cases netfilter: ipset: add comment how cidr bookkeeping is working net/netfilter/ipset/ip_set_bitmap_gen.h | 7 +- net/netfilter/ipset/ip_set_core.c | 9 +- net/netfilter/ipset/ip_set_hash_gen.h | 125 ++++++++++++++++-------- 3 files changed, 94 insertions(+), 47 deletions(-) --=20 2.39.5