On Tue, Apr 09, 2019 at 12:17:46PM +0200, Pablo Neira Ayuso wrote: > Hi Sasha, > > Would you mind to cherry-pick these two patches into 5.0.y? > > b8e204006340 ("netfilter: nft_compat: use .release_ops and remove list of extension") This one too actually, as Florian mentioned: 3f3a390dbd59d2 ("netfilter: nf_tables: use-after-free in dynamic operations") > b25a31bf0ca0 ("netfilter: nf_tables: add missing ->release_ops() in error path of newrule()") Thanks.