Re: Patch "netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets" has been added to the 4.14-stable tree

Greg KH gregkh@linuxfoundation.org wrote:

On Tue, Mar 13, 2018 at 12:29:30PM +0100, Florian Westphal wrote:

...

gregkh@linuxfoundation.org gregkh@linuxfoundation.org wrote:

...

netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets

to the 4.14-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git%3Ba=su...

This needs

commit 932909d9b28d27e807ff8eecb68c7748f6701628 ("netfilter: ebtables: fix erroneous reject of last rule")

as a followup fix, else it becomes impossible to add rules to the last builtin base chain.

That's not in Linus's tree yet :(

Is it in Dave's tree to be sent to Linus soon?

It got placed into net.git yesterday...