Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2227441/?format=api
{ "id": 2227441, "url": "http://patchwork.ozlabs.org/api/patches/2227441/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/20260423181144.3513587-3-tim.whisonant@canonical.com/", "project": { "id": 15, "url": "http://patchwork.ozlabs.org/api/projects/15/?format=api", "name": "Ubuntu Kernel", "link_name": "ubuntu-kernel", "list_id": "kernel-team.lists.ubuntu.com", "list_email": "kernel-team@lists.ubuntu.com", "web_url": null, "scm_url": null, "webscm_url": null, "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260423181144.3513587-3-tim.whisonant@canonical.com>", "list_archive_url": null, "date": "2026-04-23T18:11:42", "name": "[SRU,N/Q,1/1] netfilter: nf_tables: always walk all pending catchall elements", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "deb33ed69ba3e4c2d05f2e5b091e504dacb74aba", "submitter": { "id": 89903, "url": "http://patchwork.ozlabs.org/api/people/89903/?format=api", "name": "Tim Whisonant", "email": "tim.whisonant@canonical.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/20260423181144.3513587-3-tim.whisonant@canonical.com/mbox/", "series": [ { "id": 501232, "url": "http://patchwork.ozlabs.org/api/series/501232/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ubuntu-kernel/list/?series=501232", "date": "2026-04-23T18:11:42", "name": "[SRU,N/Q,1/1] netfilter: nf_tables: always walk all pending catchall elements", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/501232/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2227441/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2227441/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<kernel-team-bounces@lists.ubuntu.com>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (4096-bit key;\n unprotected) header.d=canonical.com header.i=@canonical.com\n header.a=rsa-sha256 header.s=20251003 header.b=EaVY9U/m;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com\n (client-ip=185.125.189.65; helo=lists.ubuntu.com;\n envelope-from=kernel-team-bounces@lists.ubuntu.com;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists.ubuntu.com (lists.ubuntu.com [185.125.189.65])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g1kh42GWSz1yHy\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 24 Apr 2026 04:12:04 +1000 (AEST)", "from localhost ([127.0.0.1] helo=lists.ubuntu.com)\n\tby lists.ubuntu.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1wFyWs-0005mv-Nw; Thu, 23 Apr 2026 18:11:58 +0000", "from smtp-relay-internal-0.internal ([10.131.114.225]\n helo=smtp-relay-internal-0.canonical.com)\n by lists.ubuntu.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)\n (Exim 4.86_2) (envelope-from <tim.whisonant@canonical.com>)\n id 1wFyWr-0005lS-2F\n for kernel-team@lists.ubuntu.com; Thu, 23 Apr 2026 18:11:57 +0000", "from mail-ot1-f69.google.com (mail-ot1-f69.google.com\n [209.85.210.69])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-relay-internal-0.canonical.com (Postfix) with ESMTPS id F31AC3FEB7\n for <kernel-team@lists.ubuntu.com>; Thu, 23 Apr 2026 18:11:56 +0000 (UTC)", "by mail-ot1-f69.google.com with SMTP id\n 46e09a7af769-7dcc8f071b3so8680315a34.2\n for <kernel-team@lists.ubuntu.com>; Thu, 23 Apr 2026 11:11:56 -0700 (PDT)", "from localhost (104-6-108-11.lightspeed.frokca.sbcglobal.net.\n [104.6.108.11]) by smtp.gmail.com with ESMTPSA id\n 46e09a7af769-7dcd164d2c3sm8775030a34.24.2026.04.23.11.11.53\n for <kernel-team@lists.ubuntu.com>\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Thu, 23 Apr 2026 11:11:54 -0700 (PDT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com;\n s=20251003; t=1776967917;\n bh=+6vNgNUpH8WzudJBdHS4fUF2nDelKruCZg3C9NcWOSg=;\n h=From:To:Subject:Date:Message-ID:In-Reply-To:References:\n MIME-Version;\n b=EaVY9U/mQ99TcbkdvBh3cdJBunPSdDPNTMJVjomxkTIw+XLPNAFLseRb7x4z68GF4\n aXscR+2Z3UdLRZxti9qx+FwfIeRiiLddKVDs5951iaGplX3iHj56BFPYei9dImEdWq\n nbMfEKtLo1rLJb1e6m+2VWEsaJ/IZGDWofB3qLlF3XuaA4fVOtEeCHcOnspM/tzTFz\n libf6Hl/IxbvWeQ8YM/GJKnShDFm7llJcx6A+KL0Bd5x0KWYXc92/ApxwNoQ7AtXbx\n kUfPdqjdlX8LPgr1unDJ4T/nmEEVN8lll2gn432BgfcGfEodLqMdq5lLxBeZk/rmLi\n 7FaLLy5wseJvaFyD2eIjYYiITZ8DUdhL1U0MCxmVC3of8E+zN1rvtPoqenmy2SG3fn\n Z6Yle/c9XLnl1dm6lmwT93SzXoEjeG2dpFs2NzBHdtZlGH3HIWGlILAw6CZyQhZ9wp\n 20zQCR0ujLCu7tCxGjsan7iG1ru5nqNkdz5UrWAMJPRNiwMEJ7S+exZcXLRajhY+PK\n oEQYR3LgaKVrFj7ygBsCx/xXKQrpSVK96us/yUVpmwlkFwJROU1X7cUSJf0y8vUiLT\n a/nJQyfHnmvjNw/yLJj2UwfR6jjSBciYBKj8tvMZheedVFiwH6bIRory6Sd6ZYcfx7\n RQVgI5pOppfbYMiSrMV/T9jI=", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776967915; x=1777572715;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to\n :cc:subject:date:message-id:reply-to;\n bh=+6vNgNUpH8WzudJBdHS4fUF2nDelKruCZg3C9NcWOSg=;\n b=lgPuyu/cK6Z4wdQ0emor7zX0mt6pgqCh175ilaZCf1GdIV3pKHkXfwHk/M+34mlto0\n l7dhi43PiYJ38jALoYDF10L1DE0qbW0n8YDsNH+LNhh/CFIGbvDRXwvf2uiXjZjobks6\n bcel0DTavl3V9tkDhtfC0ZXUhD+HVUXYtGn5rmhvYGhafV2TNpOkH8XvmrmSN32Gcu9g\n uOmW7/u3mblfsSSu1S84POscf08gCw1IXLIdZzgR0Hax4rBa03S938kQpz7j/0aYXwVu\n PEdJAfkboh8Vo4GU/3WAlc/kUpYgaSGztz6UDkfeiCOFYD3jcp8ztIWiAJ4ANXiExOs7\n qHEQ==", "X-Gm-Message-State": "AOJu0Yz2gXoTjSimk6BdFtuWl7ZgYaj9em/uT8b33Nm/VN6sLV4m7rsS\n NzFis6xjGyNeUKjLpVrI1WCLSBeFvmO/PNdsEV7Y7dSXQLaYhZkHDivii4nKG5I9+zLzicu68Wt\n MLOiISbfRnOt5V3MwaknZV941kMWX7/O2Dlr6htSHT0Y1boMaJLKbIEhOojn3M0FZiC7bIbHgJV\n J//mdUSLLiwrtKGA==", "X-Gm-Gg": "AeBDiesHrJqYxSV4NbDK601lijRvqoSZitqhuUYrniSP5dGPN+wMKRksIEWvMXliuYw\n 9z8qJqgp4VEeyZOC5mp+sDjphihcBq1Qqp9GpfIZspheoaAFGavlAnOce7wDAO7UbHtb9gqP80a\n +/uQU0lYWjkx3brsViqZ2NYQWRoo7yMEzbt+Gw40mDgoZRIMUBgqO5uXpLSMdszXjU/UbU2fNmm\n SzebsWcjLS81NQiRJZi05m66H+c1Wjxw3DZtWXLNTJCtqfPkH7YkfQhqoqB003bM7x78qVvXmhl\n YgYNNhkMTtln3Y+WZ0ZYsdUt+nqmxBUa5zfAY5YkbLKPZIVUgLvkKNvoafGU34Sj9DPB7Wnpte3\n MO+NmrvRFslAKrqZ7/lzfaJVOg/Nw9VUxImsIfc2LU6/A/P90H34J8nK6VXq67ErVbd79owe4tV\n Oqg3aUGcZxZlM9", "X-Received": [ "by 2002:a05:6830:6581:b0:7d7:d524:bc88 with SMTP id\n 46e09a7af769-7dc950f8b45mr18509775a34.10.1776967915016;\n Thu, 23 Apr 2026 11:11:55 -0700 (PDT)", "by 2002:a05:6830:6581:b0:7d7:d524:bc88 with SMTP id\n 46e09a7af769-7dc950f8b45mr18509756a34.10.1776967914545;\n Thu, 23 Apr 2026 11:11:54 -0700 (PDT)" ], "From": "Tim Whisonant <tim.whisonant@canonical.com>", "To": "kernel-team@lists.ubuntu.com", "Subject": "[SRU][N/Q][PATCH 1/1] netfilter: nf_tables: always walk all pending\n catchall elements", "Date": "Thu, 23 Apr 2026 11:11:42 -0700", "Message-ID": "<20260423181144.3513587-3-tim.whisonant@canonical.com>", "X-Mailer": "git-send-email 2.43.0", "In-Reply-To": "<20260423181144.3513587-1-tim.whisonant@canonical.com>", "References": "<20260423181144.3513587-1-tim.whisonant@canonical.com>", "MIME-Version": "1.0", "X-BeenThere": "kernel-team@lists.ubuntu.com", "X-Mailman-Version": "2.1.20", "Precedence": "list", "List-Id": "Kernel team discussions <kernel-team.lists.ubuntu.com>", "List-Unsubscribe": "<https://lists.ubuntu.com/mailman/options/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>", "List-Archive": "<https://lists.ubuntu.com/archives/kernel-team>", "List-Post": "<mailto:kernel-team@lists.ubuntu.com>", "List-Help": "<mailto:kernel-team-request@lists.ubuntu.com?subject=help>", "List-Subscribe": "<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>", "Content-Type": "text/plain; charset=\"utf-8\"", "Content-Transfer-Encoding": "base64", "Errors-To": "kernel-team-bounces@lists.ubuntu.com", "Sender": "\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>" }, "content": "From: Florian Westphal <fw@strlen.de>\n\nDuring transaction processing we might have more than one catchall element:\n1 live catchall element and 1 pending element that is coming as part of the\nnew batch.\n\nIf the map holding the catchall elements is also going away, its\nrequired to toggle all catchall elements and not just the first viable\ncandidate.\n\nOtherwise, we get:\n WARNING: ./include/net/netfilter/nf_tables.h:1281 at nft_data_release+0xb7/0xe0 [nf_tables], CPU#2: nft/1404\n RIP: 0010:nft_data_release+0xb7/0xe0 [nf_tables]\n [..]\n __nft_set_elem_destroy+0x106/0x380 [nf_tables]\n nf_tables_abort_release+0x348/0x8d0 [nf_tables]\n nf_tables_abort+0xcf2/0x3ac0 [nf_tables]\n nfnetlink_rcv_batch+0x9c9/0x20e0 [..]\n\nFixes: 628bd3e49cba (\"netfilter: nf_tables: drop map element references from preparation phase\")\nReported-by: Yiming Qian <yimingqian591@gmail.com>\nSigned-off-by: Florian Westphal <fw@strlen.de>\n(cherry picked from commit 7cb9a23d7ae40a702577d3d8bacb7026f04ac2a9)\nCVE-2026-23278\nSigned-off-by: Tim Whisonant <tim.whisonant@canonical.com>\n---\n net/netfilter/nf_tables_api.c | 2 --\n 1 file changed, 2 deletions(-)", "diff": "diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c\nindex 75d82bd17dea6..84ca8ee96f4cb 100644\n--- a/net/netfilter/nf_tables_api.c\n+++ b/net/netfilter/nf_tables_api.c\n@@ -625,7 +625,6 @@ static void nft_map_catchall_deactivate(const struct nft_ctx *ctx,\n \n \t\tnft_set_elem_change_active(ctx->net, set, ext);\n \t\tnft_setelem_data_deactivate(ctx->net, set, catchall->elem);\n-\t\tbreak;\n \t}\n }\n \n@@ -5590,7 +5589,6 @@ static void nft_map_catchall_activate(const struct nft_ctx *ctx,\n \n \t\tnft_clear(ctx->net, ext);\n \t\tnft_setelem_data_activate(ctx->net, set, catchall->elem);\n-\t\tbreak;\n \t}\n }\n \n", "prefixes": [ "SRU", "N/Q", "1/1" ] }