[precise,sru,pull-request] fix for lp#1256988

Message ID 52AB69D5.8030501@canonical.com
State New
Headers show


git://kernel.ubuntu.com/arges/ubuntu-precise.git lp1256988


Chris J Arges Dec. 13, 2013, 8:11 p.m.
BugLink: http://bugs.launchpad.net/bugs/1256988

SRU Justification:

* When restoring an iptable in a network namespace, if the network
namespace is deleted the kernel crashes.

[Test Case]
$ sudo -s
# ip netns add foobar
# ip netns exec foobar iptables -A OUTPUT -m recent --rcheck --rsource
# ip netns del foobar

[Regression Potential]
* The following patches fix the issue:

In addition this patch is required to fix a potential regression
introduced by the original fix:

Two are upstream linux patches, the last it still in the netfilter
upstream tree.


The following changes since commit 0ce353fefc9508a7a24b9b57370bf6732b692fbc:

  UBUNTU: [Config] Enable CONFIG_VT6656 (2013-12-11 08:26:01 -0500)

are available in the git repository at:

  git://kernel.ubuntu.com/arges/ubuntu-precise.git lp1256988

for you to fetch changes up to 97b78c520f82b0616929e4f6ec78442bbeae4efe:

  netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
(2013-12-13 13:46:33 -0600)

Sergey Popovich (1):
      netfilter: xt_hashlimit: fix proc entry leak in netns destroy path

Vitaly E. Lavrov (2):
      netfilter: xt_recent: fix namespace destroy path
      netfilter: xt_hashlimit: fix namespace destroy path

 net/netfilter/xt_hashlimit.c |   34 +++++++++++++++++++++++++++-------
 net/netfilter/xt_recent.c    |   20 ++++++++++++++++----
 2 files changed, 43 insertions(+), 11 deletions(-)


Tim Gardner Dec. 13, 2013, 8:47 p.m. | #1
Seems quite testable
Seth Forshee Dec. 13, 2013, 9:10 p.m. | #2

Tim Gardner Dec. 14, 2013, 1:27 p.m. | #3