ACK: [SRU][J/F][PATCH 0/1] CVE-2023-52927

[Kuba Pawlak]

On 28.03.2025 18:33, Tim Whisonant wrote:
> SRU Justification:
>
> [Impact]
>
> netfilter: allow exp not to be removed in nf_ct_find_expectation
>
> Currently nf_conntrack_in() calling nf_ct_find_expectation() will
> remove the exp from the hash table. However, in some scenario, we
> expect the exp not to be removed when the created ct will not be
> confirmed, like in OVS and TC conntrack in the following patches.
>
> This patch allows exp not to be removed by setting IPS_CONFIRMED
> in the status of the tmpl.
>
> [Fix]
>
> Oracular: not affected
> Noble:    not affected
> Jammy:    backported from upstream
> Focal:    backported from upstream
> Bionic:   patch sent to ESM ML
> Xenial:   work needed - too many prerequisites
> Trusty:   out of scope
>
> [Test Plan]
>
> Compile and boot tested.
>
> [Where problems could occur]
>
> The changes appear in the netfilter connection tracking code,
> specifically in the expectation lookup and removal. Problems
> might involve failure to release expectations at the appropriate
> time.
>
> Xin Long (1):
>    netfilter: allow exp not to be removed in nf_ct_find_expectation
>
>   include/net/netfilter/nf_conntrack_expect.h | 2 +-
>   net/netfilter/nf_conntrack_core.c           | 2 +-
>   net/netfilter/nf_conntrack_expect.c         | 4 ++--
>   net/netfilter/nft_ct.c                      | 2 ++
>   4 files changed, 6 insertions(+), 4 deletions(-)
>
Acked-by: Kuba Pawlak <kuba.pawlak at canonical.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x216A9D7E3B63DCB4.asc
Type: application/pgp-keys
Size: 3139 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20250328/e811c91b/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20250328/e811c91b/attachment.sig>