On Wed, Feb 24, 2016 at 03:34:43PM -0500, Phil Turnbull wrote: > nfacct_filter_alloc doesn't validate the NFACCT_FILTER_MASK and > NFACCT_FILTER_VALUE parameters which can trigger a NULL pointer > dereference. CAP_NET_ADMIN is required to trigger the bug. Applied, thanks. I have enqueued this to -stable: 3.18, 4.1 and 4.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html