<html><head></head><body><div>On Fri, 2024-03-15 at 15:34 -0500, Bethany Jamison wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>[Impact]<br></div><div><br></div><div>In the Linux kernel, the following vulnerability has been resolved:<br></div><div>netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc<br></div><div>on insert might collect an end interval element that has been just added in<br></div><div>this transactions, skip end interval elements that are not yet active.<br></div><div><br></div><div>[Fix]<br></div><div><br></div><div>Mantic: Clean cherry-pick.<br></div><div>Jammy: Mantic patch applied cleanly.<br></div><div>Focal: Fix and prereq commits cherry-picked cleanly.<br></div><div><br></div><div>[Test Case]<br></div><div><br></div><div>Compile and boot tested.<br></div><div><br></div><div>[Where problems could occur]<br></div><div><br></div><div>This affects many users as netfilter is widely used, but the risk of<br></div><div>regression is low as the fix is simple.<br></div><div><br></div><div>Pablo Neira Ayuso (1):<br></div><div> netfilter: nft_set_rbtree: skip end interval element from gc<br></div><div><br></div><div> net/netfilter/nft_set_rbtree.c | 6 +++---<br></div><div> 1 file changed, 3 insertions(+), 3 deletions(-)<br></div><div><br></div><div>-- <br></div><div>2.34.1<br></div><div><br></div><div><br></div></blockquote><div><br></div><div><span><pre>-- <br></pre><pre>Acked-by: Philip Cox <philip.cox@canonical.com> </pre></span></div></body></html>