[PATCH net 0/2] netfilter updates for net

Florian Westphal
2026-02-25T13:06:25Z

Hi,

This batch contains two bug fixes for the *net* tree:

1). The H323 conntrack helper has an OOB read bug, it should
ensure at least 2 bytes are available before extracting the
length. From Vahagn Vardanian.

2). Inseo An reported a use-after-free in nf_tables. Incorrect
error unwind calls kfree() on a structure that was previously
visible to another CPU. Fix from Pablo Neira Ayuso.

Please, pull these changes from:
The following changes since commit 2f61f38a217462411fed950e843b82bc119884cf:

net: stmmac: fix timestamping configuration after suspend/resume (2026-02-24 17:46:15 -0800)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git nf-26-02-25

for you to fetch changes up to e783189e0f6ccc834909323e0b67370ad93bb9c6:

netfilter: nf_tables: unconditionally bump set->nelems before insertion (2026-02-25 11:52:33 +0100)

----------------------------------------------------------------
netfilter pull request nf-26-02-25

----------------------------------------------------------------
Pablo Neira Ayuso (1):
netfilter: nf_tables: unconditionally bump set->nelems before insertion

Vahagn Vardanian (1):
netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

net/netfilter/nf_conntrack_h323_asn1.c | 2 +-
net/netfilter/nf_tables_api.c | 30 ++++++++++++++------------
2 files changed, 17 insertions(+), 15 deletions(-)
--
2.52.0