Hi stable team, please consider picking up the following commits for 4.12.y: 36ac344e16e04e3e55e8fed7446095a6458c64e6 netfilter: expect: fix crash when putting uninited expectation 97772bcd56efa21d9d8976db6f205574ea602f51 netfilter: nat: fix src map lookup (this causes severe issues when lots of nat mappings are active as we run out of local source ports). f55ce7b024090a51382ccab2730b96e2f7b4e9cf netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv all cherry-pick cleanly. Thanks, Florian