ACK: [SRU][j:linux-azure][PATCH 0/1] kernel panic was caused by a fatal exception due to a null pointer dereference in the iptable_nat module

Aaron Jauregui aaron.jauregui at canonical.com
Fri Aug 9 05:07:13 UTC 2024


On Thu, Aug 08, 2024 at 02:19:45PM -0500, John Cabaj wrote:
> BugLink: https://bugs.launchpad.net/bugs/2076291
> 
> [Impact]
> 
> * Microsoft has requested a patch to address a kernel panic issue similar to the upstream issue here - https://patchwork.kernel.org/project/netdevbpf/patch/20240731213046.6194-2-pablo@netfilter.org/
> 
> [Fix]
> 
> * Clean cherry-pick upstream commit 5830aa863981: "netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init()"
> 
> [Test Plan]
> 
> * Build and boot tested
> 
> [Where problems could occur]
> 
> * Low regression risk, mostly shifting logic
> * Change to order of register_pernet_subsys() and xt_register_template() could expose some other logic being held together under race condition
> 
> [Other info]
> 
> * SF #00391736
> 
> Kuniyuki Iwashima (1):
>   netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
> 
>  net/ipv4/netfilter/iptable_nat.c | 18 ++++++++++--------
>  1 file changed, 10 insertions(+), 8 deletions(-)

Acked-by: Aaron Jauregui <aaron.jauregui at canonical.com>



More information about the kernel-team mailing list