* stable request: netfilter: make cgroupsv2 matching work with namespaces
@ 2024-09-20 10:11 Florian Westphal
2024-09-20 16:10 ` Pablo Neira Ayuso
2024-09-27 6:56 ` Greg KH
0 siblings, 2 replies; 3+ messages in thread
From: Florian Westphal @ 2024-09-20 10:11 UTC (permalink / raw)
To: stable; +Cc: netfilter-devel
Hello,
please consider picking up:
7f3287db6543 ("netfilter: nft_socket: make cgroupsv2 matching work with namespaces")
and its followup fix,
7052622fccb1 ("netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()")
It should cherry-pick fine for 6.1 and later.
I'm not sure a 5.15 backport is worth it, as its not a crash fix and
noone has reported this problem so far with a 5.15 kernel.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: stable request: netfilter: make cgroupsv2 matching work with namespaces
2024-09-20 10:11 stable request: netfilter: make cgroupsv2 matching work with namespaces Florian Westphal
@ 2024-09-20 16:10 ` Pablo Neira Ayuso
2024-09-27 6:56 ` Greg KH
1 sibling, 0 replies; 3+ messages in thread
From: Pablo Neira Ayuso @ 2024-09-20 16:10 UTC (permalink / raw)
To: Florian Westphal; +Cc: stable, netfilter-devel
On Fri, Sep 20, 2024 at 12:11:46PM +0200, Florian Westphal wrote:
> Hello,
>
> please consider picking up:
> 7f3287db6543 ("netfilter: nft_socket: make cgroupsv2 matching work with namespaces")
> and its followup fix,
> 7052622fccb1 ("netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()")
>
> It should cherry-pick fine for 6.1 and later.
> I'm not sure a 5.15 backport is worth it, as its not a crash fix and
> noone has reported this problem so far with a 5.15 kernel.
I can take of these backports.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: stable request: netfilter: make cgroupsv2 matching work with namespaces
2024-09-20 10:11 stable request: netfilter: make cgroupsv2 matching work with namespaces Florian Westphal
2024-09-20 16:10 ` Pablo Neira Ayuso
@ 2024-09-27 6:56 ` Greg KH
1 sibling, 0 replies; 3+ messages in thread
From: Greg KH @ 2024-09-27 6:56 UTC (permalink / raw)
To: Florian Westphal; +Cc: stable, netfilter-devel
On Fri, Sep 20, 2024 at 12:11:46PM +0200, Florian Westphal wrote:
> Hello,
>
> please consider picking up:
> 7f3287db6543 ("netfilter: nft_socket: make cgroupsv2 matching work with namespaces")
> and its followup fix,
> 7052622fccb1 ("netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()")
>
> It should cherry-pick fine for 6.1 and later.
> I'm not sure a 5.15 backport is worth it, as its not a crash fix and
> noone has reported this problem so far with a 5.15 kernel.
>
Now queued up for 6.1 and newer, thanks.
greg k-h
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2024-09-27 6:56 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-09-20 10:11 stable request: netfilter: make cgroupsv2 matching work with namespaces Florian Westphal
2024-09-20 16:10 ` Pablo Neira Ayuso
2024-09-27 6:56 ` Greg KH
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).