From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <stable-owner@vger.kernel.org>
Received: from Chamillionaire.breakpoint.cc ([146.0.238.67]:39220 "EHLO
        Chamillionaire.breakpoint.cc" rhost-flags-OK-OK-OK-OK)
        by vger.kernel.org with ESMTP id S1752411AbeCML3c (ORCPT
        <rfc822;stable@vger.kernel.org>); Tue, 13 Mar 2018 07:29:32 -0400
Date: Tue, 13 Mar 2018 12:29:30 +0100
From: Florian Westphal <fw@strlen.de>
To: gregkh@linuxfoundation.org
Cc: fw@strlen.de, pablo@netfilter.org, stable@vger.kernel.org
Subject: Re: Patch "netfilter: ebtables: CONFIG_COMPAT: don't trust userland
 offsets" has been added to the 4.14-stable tree
Message-ID: <20180313112930.GA31828@breakpoint.cc>
References: <1520939690115186@kroah.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1520939690115186@kroah.com>
Sender: stable-owner@vger.kernel.org
List-ID: <stable.vger.kernel.org>

gregkh@linuxfoundation.org <gregkh@linuxfoundation.org> wrote:
>     netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
> 
> to the 4.14-stable tree which can be found at:
>     http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

This needs

commit 932909d9b28d27e807ff8eecb68c7748f6701628
("netfilter: ebtables: fix erroneous reject of last rule")

as a followup fix, else it becomes impossible to add rules
to the last builtin base chain.