Cover Letter Detail
Show a cover letter.
GET /api/covers/2227440/?format=api
{ "id": 2227440, "url": "http://patchwork.ozlabs.org/api/covers/2227440/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ubuntu-kernel/cover/20260423181144.3513587-1-tim.whisonant@canonical.com/", "project": { "id": 15, "url": "http://patchwork.ozlabs.org/api/projects/15/?format=api", "name": "Ubuntu Kernel", "link_name": "ubuntu-kernel", "list_id": "kernel-team.lists.ubuntu.com", "list_email": "kernel-team@lists.ubuntu.com", "web_url": null, "scm_url": null, "webscm_url": null, "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260423181144.3513587-1-tim.whisonant@canonical.com>", "list_archive_url": null, "date": "2026-04-23T18:11:40", "name": "[SRU,J/N/Q,0/1] CVE-2026-23278", "submitter": { "id": 89903, "url": "http://patchwork.ozlabs.org/api/people/89903/?format=api", "name": "Tim Whisonant", "email": "tim.whisonant@canonical.com" }, "mbox": "http://patchwork.ozlabs.org/project/ubuntu-kernel/cover/20260423181144.3513587-1-tim.whisonant@canonical.com/mbox/", "series": [], "comments": "http://patchwork.ozlabs.org/api/covers/2227440/comments/", "headers": { "Return-Path": "<kernel-team-bounces@lists.ubuntu.com>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (4096-bit key;\n unprotected) header.d=canonical.com header.i=@canonical.com\n header.a=rsa-sha256 header.s=20251003 header.b=T6ZZSrJI;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com\n (client-ip=185.125.189.65; helo=lists.ubuntu.com;\n envelope-from=kernel-team-bounces@lists.ubuntu.com;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists.ubuntu.com (lists.ubuntu.com [185.125.189.65])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g1kh32WTGz1yDD\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 24 Apr 2026 04:12:02 +1000 (AEST)", "from localhost ([127.0.0.1] helo=lists.ubuntu.com)\n\tby lists.ubuntu.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1wFyWo-0005jt-3h; Thu, 23 Apr 2026 18:11:54 +0000", "from smtp-relay-internal-1.internal ([10.131.114.114]\n helo=smtp-relay-internal-1.canonical.com)\n by lists.ubuntu.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)\n (Exim 4.86_2) (envelope-from <tim.whisonant@canonical.com>)\n id 1wFyWm-0005jj-JZ\n for kernel-team@lists.ubuntu.com; Thu, 23 Apr 2026 18:11:52 +0000", "from mail-oa1-f72.google.com (mail-oa1-f72.google.com\n [209.85.160.72])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-relay-internal-1.canonical.com (Postfix) with ESMTPS id 6959A3F212\n for <kernel-team@lists.ubuntu.com>; Thu, 23 Apr 2026 18:11:52 +0000 (UTC)", "by mail-oa1-f72.google.com with SMTP id\n 586e51a60fabf-409037c3f0bso6684870fac.1\n for <kernel-team@lists.ubuntu.com>; Thu, 23 Apr 2026 11:11:52 -0700 (PDT)", "from localhost (104-6-108-11.lightspeed.frokca.sbcglobal.net.\n [104.6.108.11]) by smtp.gmail.com with ESMTPSA id\n 006d021491bc7-694984114f5sm5496114eaf.7.2026.04.23.11.11.49\n for <kernel-team@lists.ubuntu.com>\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Thu, 23 Apr 2026 11:11:49 -0700 (PDT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com;\n s=20251003; t=1776967912;\n bh=XzWuKtfGoLpRiT/is5AXsL2p4HVaIwB3oOLMtxEl+D4=;\n h=From:To:Subject:Date:Message-ID:MIME-Version;\n b=T6ZZSrJIvNp5pn8vlY2DUqHt81baFrTfLQ8naUd8plEYdY7sjpDOqHtHzToWiM6yt\n nfhBcPMPAP+nLIx4anx3LWQKBfJkoLEUEN4PptoOBvQiwMWVm1wfAQfantcXeJFoSU\n vRKNhdI3JUoeothGUarSfCNIij5taeJO0OvbBc2p/ADQvMmsXDlwA3T6Y9IhDSWV51\n Fmm19k93eaRBFlFBAPQ7TT4TEpu70e2iOkWlG9xOlUkX9g4vpUUHX/UUu4JFsVm5xs\n NV3y35xzbgchc1n09zaE3JflSuCGyqQ5VxtR66Jxm6TEYb0jtL/KQQrnWBumZNxcyP\n Br2di9TK8Hrmsc0qkCnNX2pvyhlf8rpWRmpusSsk9dsgFO9jlMXTMJJ8Ca0Nq7pjG9\n t7MmOPtuhfZFCt+rU2aNsax/KEUtHYUwiJ8SUf9phByJ7Kr2ECWDK7kWImozmGU1xj\n 2hFKh9aL2sAM8k2L3tya6G0QbXfUlQb3/rt8l9ljDyBGBZN3Pgd0f5ttnJa0n50U2u\n Cfv1kw2qx/LlJcglop0dqi0Gv2HOVz6rPauSfT3hMmXVA7FR/cSpMsLf6NlxlQoTnk\n yucLIoKZSb5xgT6OdrSSANOPTCod0pzSujBnxjhIL+kp60yFH7akuQdyRru9oEYEDS\n 9HXxKrgrfYZgb7pYQoKg0krc=", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776967911; x=1777572711;\n h=content-transfer-encoding:mime-version:message-id:date:subject:to\n :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id\n :reply-to;\n bh=XzWuKtfGoLpRiT/is5AXsL2p4HVaIwB3oOLMtxEl+D4=;\n b=iN7+ZxRdWsGwisYzsqSAAgDsBVKqeiCR9BrejoYMqGi5VQwziAX/nBpgOY7vM9GO4o\n vcTbJpIqpmWpQpD8iIEDrM212ZawgoznJ0KtU8GeDjBn2oSoIRgu/2zenq3AEKdpH7fD\n +PsOhjXZ7K0VAKtE4BUv+ueoE3Ph9b/wQ4L2Rd9SHpX0CxtruDXDqmFbzUG72TPdRQ5U\n bj9gznc/TnFPu8Tl1dMWNF5j0CDnfkkug520Pz7b5mTyA7HukJ1lkmMo+85EzdQfciHy\n 9P84UdqSJ74sQM1KHmCm6erFwt35EhnBip5uViFBGAArlDd3tOvy2VztFqKH/P7uBQto\n NONA==", "X-Gm-Message-State": "AOJu0YxaN93jVc1vI7DoMl7jmCpYv6+lNCXN2RT1evtnc/TSPuIeIoUa\n X9DgyJaL29OrbLvE5XyCNC3mJd4+OgBjWj1N+iuUkKjlSeXjOh3XsN6dWzlzoZ2IMKDOMXBJ/14\n abDgTl8F1izDlp/lABM/VmiFHdVTax8ofMJc1He71LwDBpgjX9hkv2MxQWcwkdigaM+yW9eov5E\n yl2uYke03Rv68qJA==", "X-Gm-Gg": "AeBDievMWAfJJAEngFoiLNqAVe+1lxCK/d5I8B+CnGVEn7VrJIzbSHW4xaNBW27rEBK\n oz2WXwDKAVtglIqNsTWMlu9wV+QWOUr84lpNxdb4pFBNkA4SB8aACORzfwegty4jmeXBeaA/EC8\n daBWs2GwMGytQP2Yx02EbaUPchILk1ZK4tqCpX6h38zIwfj1i8rTuUUnSLfptyBfYm0qOWuvelF\n b3MNE/ckpbdV/OmWR/2Bn6B+O+g/9WF+ZRyXnBdX7wysr6xRdJvOSX6h3bhHAkXiQA+BDH4N+55\n 7DH0DrRZc4SAd8AUpX6Wtr/M2NFv3B9/JZy+TFGgOYZMaH6BH+rtIvZifRZQ3l7ubIxo8D0nXft\n IhI1GLwRQFd0o6rVmVDEaWyFBA2q7BvKjUWUWR9/gME+WIyA+TAUVUb/kIPMdAsPO97YgL67hFc\n UPjCbcWvb/HLrv", "X-Received": [ "by 2002:a05:6820:1c87:b0:696:1814:717a with SMTP id\n 006d021491bc7-69618147973mr2622754eaf.47.1776967910724;\n Thu, 23 Apr 2026 11:11:50 -0700 (PDT)", "by 2002:a05:6820:1c87:b0:696:1814:717a with SMTP id\n 006d021491bc7-69618147973mr2622741eaf.47.1776967910392;\n Thu, 23 Apr 2026 11:11:50 -0700 (PDT)" ], "From": "Tim Whisonant <tim.whisonant@canonical.com>", "To": "kernel-team@lists.ubuntu.com", "Subject": "[SRU][J/N/Q][PATCH 0/1] CVE-2026-23278", "Date": "Thu, 23 Apr 2026 11:11:40 -0700", "Message-ID": "<20260423181144.3513587-1-tim.whisonant@canonical.com>", "X-Mailer": "git-send-email 2.43.0", "MIME-Version": "1.0", "X-BeenThere": "kernel-team@lists.ubuntu.com", "X-Mailman-Version": "2.1.20", "Precedence": "list", "List-Id": "Kernel team discussions <kernel-team.lists.ubuntu.com>", "List-Unsubscribe": "<https://lists.ubuntu.com/mailman/options/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>", "List-Archive": "<https://lists.ubuntu.com/archives/kernel-team>", "List-Post": "<mailto:kernel-team@lists.ubuntu.com>", "List-Help": "<mailto:kernel-team-request@lists.ubuntu.com?subject=help>", "List-Subscribe": "<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>", "Content-Type": "text/plain; charset=\"utf-8\"", "Content-Transfer-Encoding": "base64", "Errors-To": "kernel-team-bounces@lists.ubuntu.com", "Sender": "\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>" }, "content": "SRU Justification:\n\n[Impact]\n\nnetfilter: nf_tables: always walk all pending catchall elements\n\nDuring transaction processing we might have more than one catchall element:\n1 live catchall element and 1 pending element that is coming as part of the\nnew batch.\n\nIf the map holding the catchall elements is also going away, its\nrequired to toggle all catchall elements and not just the first viable\ncandidate.\n\nOtherwise, we get:\n WARNING: ./include/net/netfilter/nf_tables.h:1281 at nft_data_release+0xb7/0xe0 [nf_tables], CPU#2: nft/1404\n RIP: 0010:nft_data_release+0xb7/0xe0 [nf_tables]\n [..]\n __nft_set_elem_destroy+0x106/0x380 [nf_tables]\n nf_tables_abort_release+0x348/0x8d0 [nf_tables]\n nf_tables_abort+0xcf2/0x3ac0 [nf_tables]\n nfnetlink_rcv_batch+0x9c9/0x20e0 [..]\n\n[Fix]\n\nQuesting: applied Noble patch\nNoble: cherry picked from upstream\nJammy: backported from upstream\nFocal: not affected\nBionic: not affected\nXenial: not affected\nTrusty: not affected\n\n[Test Plan]\n\nCompile and boot tested.\n\n[Where problems could occur]\n\nThe change affects netfilter's nftables catchall set objects\ncode responsible for activating and deactivating these catchall\nelements. Failures might manifest as incorrectly deactivated\nor activated catchall elements.\n\nFlorian Westphal (1):\n netfilter: nf_tables: always walk all pending catchall elements\n\n net/netfilter/nf_tables_api.c | 2 --\n 1 file changed, 2 deletions(-)" }