[{"id":3682204,"web_url":"http://patchwork.ozlabs.org/comment/3682204/","msgid":"<96e6e9ef-6111-40e0-9950-48b3aaa8ecc2@canonical.com>","list_archive_url":null,"date":"2026-04-24T21:17:05","subject":"ACK: [SRU][J/N/Q][PATCH 0/1] CVE-2026-31418","submitter":{"id":87568,"url":"http://patchwork.ozlabs.org/api/people/87568/","name":"Bethany Jamison","email":"bethany.jamison@canonical.com"},"content":"On 4/24/26 11:41 AM, Tim Whisonant wrote:\n> SRU Justification:\n>\n> [Impact]\n>\n> netfilter: ipset: drop logically empty buckets in mtype_del\n>\n> mtype_del() counts empty slots below n->pos in k, but it only drops the\n> bucket when both n->pos and k are zero. This misses buckets whose live\n> entries have all been removed while n->pos still points past deleted slots.\n>\n> Treat a bucket as empty when all positions below n->pos are unused and\n> release it directly instead of shrinking it further.\n>\n> [Fix]\n>\n> Questing: applied Jammy patch\n> Noble: applied Jammy patch\n> Jammy: cherry picked from upstream\n> Focal: patch sent to forgejo\n> Bionic: not affected\n> Xenial: not affected\n> Trusty: not affected\n>\n> [Test Plan]\n>\n> Compile and boot tested.\n>\n> [Where problems could occur]\n>\n> The change affects the routine responsible for managing ipset\n> hash table element removals. Issues might manifest as\n> prematurely- or non-freed hash table elements.\n>\n> Yifan Wu (1):\n> netfilter: ipset: drop logically empty buckets in mtype_del\n>\n> net/netfilter/ipset/ip_set_hash_gen.h | 2 +-\n> 1 file changed, 1 insertion(+), 1 deletion(-)\n>\nAcked-by: Bethany Jamison ","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (4096-bit key;\n unprotected) header.d=canonical.com header.i=@canonical.com\n header.a=rsa-sha256 header.s=20251003 header.b=J9c2ne4b;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com\n (client-ip=185.125.189.65; helo=lists.ubuntu.com;\n envelope-from=kernel-team-bounces@lists.ubuntu.com;\n receiver=patchwork.ozlabs.org)"],"Received":["from lists.ubuntu.com (lists.ubuntu.com [185.125.189.65])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g2QlQ6bFbz1yHS\n\tfor ; Sat, 25 Apr 2026 07:17:22 +1000 (AEST)","from localhost ([127.0.0.1] helo=lists.ubuntu.com)\n\tby lists.ubuntu.com with esmtp (Exim 4.86_2)\n\t(envelope-from )\n\tid 1wGNtg-0005On-M5; Fri, 24 Apr 2026 21:17:12 +0000","from smtp-relay-internal-0.internal ([10.131.114.225]\n helo=smtp-relay-internal-0.canonical.com)\n by lists.ubuntu.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)\n (Exim 4.86_2) (envelope-from )\n id 1wGNtf-0005OW-DJ\n for kernel-team@lists.ubuntu.com; Fri, 24 Apr 2026 21:17:11 +0000","from mail-qv1-f72.google.com (mail-qv1-f72.google.com\n [209.85.219.72])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-relay-internal-0.canonical.com (Postfix) with ESMTPS id 394C33FEBA\n for ; Fri, 24 Apr 2026 21:17:11 +0000 (UTC)","by mail-qv1-f72.google.com with SMTP id\n 6a1803df08f44-895375da74bso17642956d6.0\n for ; Fri, 24 Apr 2026 14:17:11 -0700 (PDT)","from ?IPV6:2001:67c:1562:8007::aac:48f9?\n ([2001:67c:1562:8007::aac:48f9]) by smtp.gmail.com with ESMTPSA id\n 6a1803df08f44-8b02ae61332sm186790396d6.24.2026.04.24.14.17.06\n for \n (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);\n Fri, 24 Apr 2026 14:17:07 -0700 (PDT)"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com;\n s=20251003; t=1777065431;\n bh=D+w61Axt0z4gJ0w/v9tyVnRL9Iwd4rxvW6H1/nlfHUQ=;\n h=Message-ID:Date:MIME-Version:Subject:To:References:From:\n In-Reply-To:Content-Type;\n b=J9c2ne4b2ctC2WXy8Ob2aonk0kTU56kQ1DeyCDPJOFggHwqPLPgRxTtnQOOGFEEM8\n HTMTq8/yzl4+VPApG/KCv3qvOQF4BW6iN0NO6mK3ZasuV3eCr1YqkW21kyb/q7maIc\n B5yguNsNkM8S7fz7d9HylTJiD/pCcQnCC/8TyAk6DZDhTayqFf7LhBG6ZeLKQ5/dJS\n iExI/pTMgNj/kkTBienRGY/WCbYlRm/4drz+h0eAfq5xeFtAi8QFyic5fKRnPTsfCR\n 8XyKNLeA2g6WcV8gJIkOKhtoGnfKoQVBwY/HCLeGpx+VsMMiJHBvi73VDDasI+R7PV\n XJzUFXhP8g1mxRYWJ15OkaYqobMPteErs1f8hxaQOlKJN8KURkY5XvfloLaY5qGmau\n lxUKxMfsJYOzm+EO+GohQiy0NN3EekF8JYCgpAEsHrUfMKKxof4oBWZFgnb0ZFovjU\n FBwXet8wfROCl+CQFGx6gMdP/goCdtBh9VHmsaj/9wJZXK1lGUHri3R/dnL972eXKK\n 59XgXmeIch2HIT5yf8/hP6BTDFDTOk7OHcPw6qqLmBXduPQyy85y83Jn+ltcAUKXtZ\n 5M+2dy31tLnJuX4qv2fiLNe6/FKc9HJ3RlzATJTBOOxEDFs3RPeAgXW7yIQNt3WXp8\n sBN50lSsXN24uDiyHI5gXW1E=","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1777065428; x=1777670228;\n h=content-transfer-encoding:in-reply-to:from:content-language\n :references:to:subject:user-agent:mime-version:date:message-id\n :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id\n :reply-to;\n bh=D+w61Axt0z4gJ0w/v9tyVnRL9Iwd4rxvW6H1/nlfHUQ=;\n b=g6nmYmF307XUNTRD7OZzgxDjr+uK2SgXjHj64U0e0cioQDf/zaJEvw9XuM5wHI/F5e\n iKnsHcXq45zWDIQj/GlmpEaWJXwPGhNhl7FWBqpHgJdfxRx7ZaFnLa+Y+Sp48TaxlNRR\n QOo3ZzDmQdJPI7Y/vEE5lj/hNYHuKqxhSk5BOy8eW1Fc2/NLkuDGPEEvDxu3/iqRzx5m\n OEay4TXg6LTaytO7c+q6sDSdHKR0CCLKmluC2sifqmTw3I+x8MnI8n55YB2UMWVcEbgA\n ngFgu3FL97LnIZEHwh947T2DWJ1NATo1k7po9rrvSLoyALc9UQ0uaSEqxedbdYXoAfmt\n BT4g==","X-Gm-Message-State":"AOJu0Yzforg38KR0TGzj2R6hZVTkz69lNf8MzNvnDQGPLOgcKhZmLV6y\n 7itENjckDdjirBmN1AeTOo8fjrLA/BUqBE5N1bgouh6IDyoeeSWSeQeiwbJPwstwrt28qgphAiw\n BJNcK5m+iSuIEGlQhk/jMw9o5OogDIFNqTkNCZEUfqrUEBwHSpJa2Nr2z+oaK0pfWb06HmQmF32\n e2zCSWhjwm9PQPIg==","X-Gm-Gg":"AeBDieu333/0VYIuSU8o7YU4vsSr6cA5DRWsPdijq4XSZ+mOs+4siQ3OvKtMTnWuJTc\n bb4qLvpFEOxns2TjrTIZNNCPsYZSZ5XM94BjdnuFzSQxD1KZBc8JB/ftalvzG+ExkfI5+oiZB7z\n L9UPAkZJHSFoQOhXEdIeL56chlcSNpPAW2YQPoGCAcWiD+UC0rml/wi0mgiiqAWlTTVqLu4NTnQ\n JOTsTu5l5L7YKg+nbDKHyeY+eKXk0Ig5OAmlIapkKgFOgE4dhleK1iKfYqNr6WZe4YWkDbv+oB2\n 9GyDKaLrZHv4mQPkBx+PX+6AnrGPV7WNox5plqeiRmNBg6sTmE4eIU7gaYRca2t2eusxHvAloqw\n MlqBe7X6Sjg1ZViOD/qGK3NTVOw094WCHk0Fi3T+D8zycuIAj5tWfbW9rSfeWYF1GlGs=","X-Received":["by 2002:a05:6214:518c:b0:8ac:b300:c558 with SMTP id\n 6a1803df08f44-8b028023a33mr342338286d6.2.1777065428556;\n Fri, 24 Apr 2026 14:17:08 -0700 (PDT)","by 2002:a05:6214:518c:b0:8ac:b300:c558 with SMTP id\n 6a1803df08f44-8b028023a33mr342337916d6.2.1777065428088;\n Fri, 24 Apr 2026 14:17:08 -0700 (PDT)"],"Message-ID":"<96e6e9ef-6111-40e0-9950-48b3aaa8ecc2@canonical.com>","Date":"Fri, 24 Apr 2026 16:17:05 -0500","MIME-Version":"1.0","User-Agent":"Betterbird (Linux)","Subject":"ACK: [SRU][J/N/Q][PATCH 0/1] CVE-2026-31418","To":"kernel-team@lists.ubuntu.com","References":"<20260424164150.3658854-1-tim.whisonant@canonical.com>","Content-Language":"en-US","From":"Bethany Jamison ","In-Reply-To":"<20260424164150.3658854-1-tim.whisonant@canonical.com>","X-BeenThere":"kernel-team@lists.ubuntu.com","X-Mailman-Version":"2.1.20","Precedence":"list","List-Id":"Kernel team discussions ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Transfer-Encoding":"base64","Content-Type":"text/plain; charset=\"utf-8\"; Format=\"flowed\"","Errors-To":"kernel-team-bounces@lists.ubuntu.com","Sender":"\"kernel-team\" "}}]