Hi,
The following patchset contains two Netfilter fixes for net:
Patch #1 fixes CONFIG_SYSCTL=n for a patch coming in the previous PR
to move the sysctl toggle to enable SRv6 netfilter hooks from
nf_conntrack to the core, from Jianguo Wu.
Patch #2 fixes a possible pointer leak to userspace due to insufficient
validation of NFT_DATA_VALUE.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git nf-24-06-27
Thanks.
----------------------------------------------------------------
The following changes since commit 058722ee350c0bdd664e467156feb2bf5d9cc271:
net: usb: ax88179_178a: improve link status logs (2024-06-24 10:15:09 +0100)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git tags/nf-24-06-27
for you to fetch changes up to 7931d32955e09d0a11b1fe0b6aac1bfa061c005c:
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (2024-06-27 01:09:51 +0200)
----------------------------------------------------------------
netfilter pull request 24-06-27
----------------------------------------------------------------
Jianguo Wu (1):
netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when CONFIG_SYSCTL=n
Pablo Neira Ayuso (1):
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
include/net/netfilter/nf_tables.h | 5 +++++
net/netfilter/nf_hooks_lwtunnel.c | 3 +++
net/netfilter/nf_tables_api.c | 8 ++++----
net/netfilter/nft_lookup.c | 3 ++-
4 files changed, 14 insertions(+), 5 deletions(-)
