Patch "netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert" has been added to the 3.18-stable tree