Re: [PATCH 6.18 315/641] netfilter: nft_set_rbtree: validate open interval overlap

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

On Wed, Mar 04, 2026 at 10:04:40AM +0100, Greg Kroah-Hartman wrote:
> On Wed, Mar 04, 2026 at 08:29:16AM +0100, Thorsten Leemhuis wrote:
> > On 3/4/26 02:01, Pablo Neira Ayuso wrote:
> > > 
> > > Would it be possible to revert this patch in -stable 6.18?
> > > 
> > > There is a bug in userspace nftables 1.1.6 that gets amplified by this
> > > patch, resulting in rejecting large interval sets with -stable 6.18.
> > 
> > Sasha, I wonder if it might be worth the risk squeezing this revert into
> > 6.18.16 and 6.19.6, as there are various reports coming in about the
> > regression that Pablo mentioned:
> > 
> > https://bugzilla.kernel.org/show_bug.cgi?id=221152
> > https://bugzilla.kernel.org/show_bug.cgi?id=221158
> > https://lore.kernel.org/all/9d110d860c0c7e110d018ea53a7666eba275da20.camel@gmail.com/
> > https://lore.kernel.org/all/2a780701-f1e4-4ff4-b796-889f7ee19ead@crc.id.au/
> > 
> > I think I saw a at least two more.
> 
> Let's wait for the next cycle, this one is "big enough" as is, I can do
> a "quick" release with just a revert here for this if needed in a few
> days.

Sorry for the delay, now queued up.

greg k-h