ACK: [SRU][J/N/Q][PATCH 0/3] CVE-2026-23272

[Vinicius Peixoto]

On Wed May 6, 2026 at 1:33 PM -03, Ian Whitfield wrote:
<snip>
>
> Florian Westphal (1):
>   netfilter: nf_tables: always increment set element count
>
> Pablo Neira Ayuso (2):
>   netfilter: nf_tables: fix set size with rbtree backend
>   netfilter: nf_tables: unconditionally bump set->nelems before
>     insertion
>
>  include/net/netfilter/nf_tables.h |  6 +++
>  net/netfilter/nf_tables_api.c     | 72 ++++++++++++++++++++++++++-----
>  net/netfilter/nft_set_rbtree.c    | 43 ++++++++++++++++++
>  3 files changed, 110 insertions(+), 11 deletions(-)

Acked-by: Vinicius Peixoto <vinicius.peixoto at canonical.com>