Cover Letter Detail
Show a cover letter.
GET /api/1.0/covers/2221244/?format=api
{ "id": 2221244, "url": "http://patchwork.ozlabs.org/api/1.0/covers/2221244/?format=api", "project": { "id": 15, "url": "http://patchwork.ozlabs.org/api/1.0/projects/15/?format=api", "name": "Ubuntu Kernel", "link_name": "ubuntu-kernel", "list_id": "kernel-team.lists.ubuntu.com", "list_email": "kernel-team@lists.ubuntu.com", "web_url": null, "scm_url": null, "webscm_url": null }, "msgid": "<20260408221230.1835720-1-tim.whisonant@canonical.com>", "date": "2026-04-08T22:11:49", "name": "[SRU,J/N/Q,0/1] CVE-2026-23392", "submitter": { "id": 89903, "url": "http://patchwork.ozlabs.org/api/1.0/people/89903/?format=api", "name": "Tim Whisonant", "email": "tim.whisonant@canonical.com" }, "series": [ { "id": 499219, "url": "http://patchwork.ozlabs.org/api/1.0/series/499219/?format=api", "date": "2026-04-08T22:11:49", "name": "CVE-2026-23392", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/499219/mbox/" } ], "headers": { "Return-Path": "<kernel-team-bounces@lists.ubuntu.com>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (4096-bit key;\n unprotected) header.d=canonical.com header.i=@canonical.com\n header.a=rsa-sha256 header.s=20251003 header.b=A9XNydRV;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com\n (client-ip=185.125.189.65; helo=lists.ubuntu.com;\n envelope-from=kernel-team-bounces@lists.ubuntu.com;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists.ubuntu.com (lists.ubuntu.com [185.125.189.65])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4frcks3Nsfz1yCv\n\tfor <incoming@patchwork.ozlabs.org>; Thu, 09 Apr 2026 08:12:52 +1000 (AEST)", "from localhost ([127.0.0.1] helo=lists.ubuntu.com)\n\tby lists.ubuntu.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1wAb8a-0007Y7-HE; Wed, 08 Apr 2026 22:12:40 +0000", "from smtp-relay-internal-0.internal ([10.131.114.225]\n helo=smtp-relay-internal-0.canonical.com)\n by lists.ubuntu.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)\n (Exim 4.86_2) (envelope-from <tim.whisonant@canonical.com>)\n id 1wAb8Z-0007Xk-6D\n for kernel-team@lists.ubuntu.com; Wed, 08 Apr 2026 22:12:39 +0000", "from mail-yw1-f197.google.com (mail-yw1-f197.google.com\n [209.85.128.197])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-relay-internal-0.canonical.com (Postfix) with ESMTPS id DB9ED3F652\n for <kernel-team@lists.ubuntu.com>; Wed, 8 Apr 2026 22:12:38 +0000 (UTC)", "by mail-yw1-f197.google.com with SMTP id\n 00721157ae682-79dbfda753cso4731397b3.3\n for <kernel-team@lists.ubuntu.com>; Wed, 08 Apr 2026 15:12:38 -0700 (PDT)", "from localhost (104-6-108-11.lightspeed.frokca.sbcglobal.net.\n [104.6.108.11]) by smtp.gmail.com with ESMTPSA id\n 00721157ae682-7a370cf93dfsm90826177b3.34.2026.04.08.15.12.35\n for <kernel-team@lists.ubuntu.com>\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Wed, 08 Apr 2026 15:12:35 -0700 (PDT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com;\n s=20251003; t=1775686358;\n bh=2UrmMexi433YQR1vnxPU8XjysBM1m4fUYsiFEGoxwWA=;\n h=From:To:Subject:Date:Message-ID:MIME-Version;\n b=A9XNydRV8wJryjo5sCj+yKHct9yNA5xubmJM/gTHS49yV7levB3t8ufnuBxTBq3jb\n rnNFprpw96RG4X4zH4RxkqwINGY6MGG8VHM9fr78pVKr8KQY/o0XBZkdUiBm1ppExF\n dmfxpJC7Y8e0okfSd0EWtMz8/lTxrGCajAF9QObzAcWnPIpsn4kIB3d5Ifjq/EQ0y/\n yV61mWd3X7MsMiwER+F4g4gmMXQW5TQG/n2tiK3gQl4KmWOoauBe41EdmyW5m0TKT4\n ECRv53IlJuDYj/54Ht8iSXp2soPJGw58dy36yD0Uq9ZOIkUb2ZYI/ClbvpsoSmZ/yk\n V6lnYzoXpxzb1yrU1XBrNEtzmFE3cKpOZvujOBaGcZCrE9WIaOQy6xEclYtioKfaRm\n rq7HN1bTYIlh9pFNvbmDxVSHYq6FYhxs+QxomR66VMMiiowq6H8HUa0qxLcmbrMm0f\n a4y9iBzehz1bQkmiJVe7aOI8nNzKOG8O60MSTR4RdOkywgcu6kUO6mj7M72FWJyleb\n txeV52HvPfXVkaks8l+Ve4VHMS7JFBrv1PHW54Y66DOm/0fVyLTN9oiXGvfbWNeqYQ\n QHfcTfgXZRQWG535ff7pUgaeRvWLJm8ZQscnZWrCGXvvBKE6krCzgnURmITt/uHPU1\n okFf8n3CCPiHaKPp4B1VqnqM=", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1775686357; x=1776291157;\n h=content-transfer-encoding:mime-version:message-id:date:subject:to\n :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id\n :reply-to;\n bh=2UrmMexi433YQR1vnxPU8XjysBM1m4fUYsiFEGoxwWA=;\n b=GiXOEN7yFNv8tHE0TFdp/E4pKU8/kJrlz7J5eMGUvBmcWqeDN4W3wmwowMYaQirB8/\n JY3apgFqI0CcQipUodY1adcPlvCdLgUElEO8RU18Q2G3cXrtO1wXV9jzoxNc3FaKRDvL\n A6wRMDg5QnPgvtisIzBwnD1efaHkG89OThTIwxnsB7DBdTXIn/QJQXznKAX6lKneqRq1\n xwShvZdZqeYtuUwEy0mNn5Uh6wRoWM5LcHfk+ke9apKN9IIvlUrci15+sSyQaWwPgmq7\n 1hpumECjWNE7gBDqGvorkLFEe0hyPedJMKktCRdMiH6QcfzXhc9l2MXx9kWPodaUGahW\n tLCQ==", "X-Gm-Message-State": "AOJu0YwU+C9XR0cFw5L0h1JkQZaot+KfKiKhUHh7axJAiaVwEy0FKdB+\n ecQPyel86VEqsxNOjpBOv7wfm30Qv9JG09ys7dKWLdoGWLeDcy5rFmkS/Zl9T8XHdSkv1zX6BJ4\n YLx+SPAlAXVq109LZLj/XJrq0juOtlJ2R08vgd2aHnLU4pwQW5hpllpAt9O54nlYhyzz97CgZle\n yCDtzleyBFGy1oRg==", "X-Gm-Gg": "AeBDiesZhz/2Xr2yHmUAA50NYtzLE8DUar8Q0s5M24R8MjKF64btEQBgoXh5Mxn+VQm\n A3UYsYtbWKr4cHoeTPKpwuOkPqNqVkRPZXo6QvWZ1pCIMXSABAxLu6dL4nyWIjjWyNwFhqfby6Q\n 1qH+sho1wyOFH/Da+ReTZwEnTqxeQ8x0/4tkl0qf+W7MRWG+gUho0jF/ZR+5wtWgdmeoHWBCCpM\n hrdoDNejknOkHzSutUMEGfEt6MWBDsQJX0IwoyZGQ7hSRa8q5gkuZg5uqodBqKDS0sPf6R1sW2v\n 6TyT2ps2fa+VwBx8uTbdTsBvi/xB0uaolJg1oM8Z528TwT8nWPUTMJPLxsx8Doc8xTep16U5T3N\n appKu4LIEKV5UwvPw6uAkYe2cOS037+9uZBvEHK4UvGlpMNADps368bbMVSlB8fLj2FBuRQMkMo\n yRgg==", "X-Received": [ "by 2002:a05:690c:86:b0:7a2:a8dd:165d with SMTP id\n 00721157ae682-7a4d644750dmr229871187b3.53.1775686356960;\n Wed, 08 Apr 2026 15:12:36 -0700 (PDT)", "by 2002:a05:690c:86:b0:7a2:a8dd:165d with SMTP id\n 00721157ae682-7a4d644750dmr229870977b3.53.1775686356449;\n Wed, 08 Apr 2026 15:12:36 -0700 (PDT)" ], "From": "Tim Whisonant <tim.whisonant@canonical.com>", "To": "kernel-team@lists.ubuntu.com", "Subject": "[SRU][J/N/Q][PATCH 0/1] CVE-2026-23392", "Date": "Wed, 8 Apr 2026 15:11:49 -0700", "Message-ID": "<20260408221230.1835720-1-tim.whisonant@canonical.com>", "X-Mailer": "git-send-email 2.43.0", "MIME-Version": "1.0", "X-BeenThere": "kernel-team@lists.ubuntu.com", "X-Mailman-Version": "2.1.20", "Precedence": "list", "List-Id": "Kernel team discussions <kernel-team.lists.ubuntu.com>", "List-Unsubscribe": "<https://lists.ubuntu.com/mailman/options/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>", "List-Archive": "<https://lists.ubuntu.com/archives/kernel-team>", "List-Post": "<mailto:kernel-team@lists.ubuntu.com>", "List-Help": "<mailto:kernel-team-request@lists.ubuntu.com?subject=help>", "List-Subscribe": "<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>", "Content-Type": "text/plain; charset=\"utf-8\"", "Content-Transfer-Encoding": "base64", "Errors-To": "kernel-team-bounces@lists.ubuntu.com", "Sender": "\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>" }, "content": "SRU Justification:\n\n[Impact]\n\nnetfilter: nf_tables: release flowtable after rcu grace period on error\n\nCall synchronize_rcu() after unregistering the hooks from error path,\nsince a hook that already refers to this flowtable can be already\nregistered, exposing this flowtable to packet path and nfnetlink_hook\ncontrol plane.\n\nThis error path is rare, it should only happen by reaching the maximum\nnumber hooks or by failing to set up to hardware offload, just call\nsynchronize_rcu().\n\nThere is a check for already used device hooks by different flowtable\nthat could result in EEXIST at this late stage. The hook parser can be\nupdated to perform this check earlier to this error path really becomes\nrarely exercised.\n\nUncovered by KASAN reported as use-after-free from nfnetlink_hook path\nwhen dumping hooks.\n\n[Fix]\n\nQuesting: applied Noble patch\nNoble: cherry picked from upstream\nJammy: backported from upstream\nFocal: sent to Forgejo\nBionic: not affected\nXenial: not affected\nTrusty: not affected\n\n[Test Plan]\n\nCompile and boot tested.\n\n[Where problems could occur]\n\nThe change affects the nftables fast path code, particularly the\nallocation routine for the flowtable object, to correct a use\nafter free in the error handling path. Issues would affect this\nnftables fast path table object handling.\n\nPablo Neira Ayuso (1):\n netfilter: nf_tables: release flowtable after rcu grace period on\n error\n\n net/netfilter/nf_tables_api.c | 1 +\n 1 file changed, 1 insertion(+)" }