netdev - Re: [PATCH net-next 01/10] netfilter: nf_tables: reset table validation state on abort

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: 
 <176905681585.1558231.4991951813231134524.git-patchwork-notify@kernel.org>
Date: Thu, 22 Jan 2026 04:40:15 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Florian Westphal <fw@...len.de>
Cc: netdev@...r.kernel.org, pabeni@...hat.com, davem@...emloft.net,
 edumazet@...gle.com, kuba@...nel.org, netfilter-devel@...r.kernel.org,
 pablo@...filter.org
Subject: Re: [PATCH net-next 01/10] netfilter: nf_tables: reset table
 validation
 state on abort

Hello:

This series was applied to netdev/net-next.git (main)
by Florian Westphal <fw@...len.de>:

On Tue, 20 Jan 2026 20:17:54 +0100 you wrote:
> If a transaction fails the final validation in the commit hook, the table
> validation state is changed to NFT_VALIDATE_DO and a replay of the batch is
> performed.  Every rule insert will then do a graph validation.
> 
> This is much slower, but provides better error reporting to the user
> because we can point at the rule that introduces the validation issue.
> 
> [...]

Here is the summary with links:
  - [net-next,01/10] netfilter: nf_tables: reset table validation state on abort
    https://git.kernel.org/netdev/net-next/c/6f93616a7323
  - [net-next,02/10] netfilter: nf_conntrack: Add allow_clash to generic protocol handler
    https://git.kernel.org/netdev/net-next/c/8a49fc8d8a3e
  - [net-next,03/10] netfilter: nf_conncount: increase the connection clean up limit to 64
    https://git.kernel.org/netdev/net-next/c/21d033e47273
  - [net-next,04/10] netfilter: nf_conntrack: enable icmp clash support
    https://git.kernel.org/netdev/net-next/c/f7becf0dad8f
  - [net-next,05/10] netfilter: don't include xt and nftables.h in unrelated subsystems
    https://git.kernel.org/netdev/net-next/c/910d27122775
  - [net-next,06/10] netfilter: nf_conntrack: don't rely on implicit includes
    https://git.kernel.org/netdev/net-next/c/d00453b6e3a3
  - [net-next,07/10] netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation
    https://git.kernel.org/netdev/net-next/c/a4400a5b343d
  - [net-next,08/10] netfilter: nft_compat: add more restrictions on netlink attributes
    https://git.kernel.org/netdev/net-next/c/cda26c645946
  - [net-next,09/10] netfilter: nf_conncount: fix tracking of connections from localhost
    https://git.kernel.org/netdev/net-next/c/de8a70cefcb2
  - [net-next,10/10] netfilter: xt_tcpmss: check remaining length before reading optlen
    https://git.kernel.org/netdev/net-next/c/735ee8582da3

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html