Florian Westphal c46172147e netfilter: conntrack: do not auto-delete clash entries on reply ... Its possible that we have more than one packet with the same ct tuple simultaneously, e.g. when an application emits n packets on same UDP socket from multiple threads. NAT rules might be applied to those packets. With the right set of rules, n packets will be mapped to m destinations, where at least two packets end up with the same destination. When this happens, the existing clash resolution may merge the skb that is processed after the first has been received with the identical tuple already in hash table. However, its possible that this identical tuple is a NAT_CLASH tuple. In that case the second skb will be sent, but no reply can be received since the reply that is processed first removes the NAT_CLASH tuple. Do not auto-delete, this gives a 1 second window for replies to be passed back to originator. Packets that are coming later (udp stream case) will not be affected: they match the original ct entry, not a NAT_CLASH one. Also prevent NAT_CLASH entries from getting offloaded. Fixes: 6a757c07e5 ("netfilter: conntrack: allow insertion of clashing entries") Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2020-08-29 13:03:06 +02:00
..
6lowpan	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
9p	9p pull request for inclusion in 5.9	2020-08-15 08:34:36 -07:00
802
8021q	net: get rid of lockdep_set_class_and_subclass()	2020-06-28 21:37:23 -07:00
appletalk	appletalk: Fix atalk_proc_init() return path	2020-08-03 15:48:32 -07:00
atm	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00
ax25	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-07-25 17:49:04 -07:00
batman-adv	batman-adv: bla: use netif_rx_ni when not in interrupt context	2020-08-18 19:40:03 +02:00
bluetooth	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00
bpf	bpf: Allow to specify ifindex for skb in bpf_prog_test_run_skb	2020-08-03 23:32:23 +02:00
bpfilter	Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2020-08-04 14:27:25 -07:00
bridge	netfilter: ebtables: reject bogus getopt len value	2020-08-14 11:59:08 +02:00
caif	net: caif: fix error code handling	2020-08-25 07:50:25 -07:00
can	can: j1939: add rxtimer for multipacket broadcast session	2020-08-15 11:12:58 +02:00
ceph	libceph: replace HTTP links with HTTPS ones	2020-08-03 11:05:26 +02:00
core	net: Fix some comments	2020-08-27 07:55:59 -07:00
dcb	dcb_doit: remove redundant skb check	2020-06-23 20:27:09 -07:00
dccp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next	2020-08-05 20:13:21 -07:00
decnet	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2020-08-03 16:03:18 -07:00
dns_resolver
dsa	net: dsa: stop overriding master's ndo_get_phys_port_name	2020-07-23 15:14:58 -07:00
ethernet	net: move devres helpers into a separate source file	2020-05-23 16:56:17 -07:00
ethtool	ethtool: Don't omit the netlink reply if no features were changed	2020-08-18 16:00:24 -07:00
hsr	hsr: Use %pM format specifier for MAC addresses	2020-07-31 16:46:26 -07:00
ieee802154	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
ife
ipv4	netfilter: delete repeated words	2020-08-28 20:11:38 +02:00
ipv6	gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY	2020-08-20 16:28:04 -07:00
iucv	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next	2020-08-05 20:13:21 -07:00
kcm	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
key	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-08-02 01:02:12 -07:00
l2tp	l2tp: improve API documentation in l2tp_core.h	2020-07-30 16:45:31 -07:00
l3mdev	net: Fix some comments	2020-08-27 07:55:59 -07:00
lapb	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
llc	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
mac80211	mac80211: reduce packet loss event false positives	2020-08-27 10:53:20 +02:00
mac802154	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00
mpls	net: Removed the device type check to add mpls support for devices	2020-07-27 11:40:47 -07:00
mptcp	mptcp: free acked data before waiting for more memory	2020-08-26 15:48:44 -07:00
ncsi	net/ncsi: use eth_zero_addr() to clear mac address	2020-07-23 11:49:41 -07:00
netfilter	netfilter: conntrack: do not auto-delete clash entries on reply	2020-08-29 13:03:06 +02:00
netlabel	netlabel: fix problems with mapping removal	2020-08-24 16:08:00 -07:00
netlink	netlink: fix a data race in netlink_rcv_wake()	2020-08-28 06:51:11 -07:00
netrom	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
nfc	net/nfc/rawsock.c: add CAP_NET_RAW check.	2020-08-11 10:34:30 -07:00
nsh	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
openvswitch	net: openvswitch: introduce common code for flushing flows	2020-08-13 15:53:30 -07:00
packet	af_packet: TPACKET_V3: fix fill status rwlock imbalance	2020-08-13 15:37:30 -07:00
phonet	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
psample	net: psample: fix build error when CONFIG_INET is not enabled	2020-05-23 16:36:05 -07:00
qrtr	net: qrtr: fix usage of idr in port assignment to socket	2020-08-17 15:00:41 -07:00
rds	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-08-02 01:02:12 -07:00
rfkill
rose	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
rxrpc	rxrpc: Fix memory leak in rxkad_verify_response()	2020-08-27 12:59:45 -07:00
sched	net_sched: fix error path in red_init()	2020-08-28 07:16:46 -07:00
sctp	sctp: not disable bh in the whole sctp_get_port_local()	2020-08-24 15:50:17 -07:00
smc	net/smc: Prevent kernel-infoleak in __smc_diag_dump()	2020-08-20 12:07:31 -07:00
strparser
sunrpc	NFS client updates for Linux 5.9	2020-08-15 08:26:55 -07:00
switchdev	net: switchdev: kerneldoc fixes	2020-07-13 17:20:40 -07:00
tipc	tipc: call rcu_read_lock() in tipc_aead_encrypt_done()	2020-08-20 16:42:08 -07:00
tls	net/tls: Fix kmap usage	2020-08-11 10:20:34 -07:00
unix	net: make ->{get,set}sockopt in proto_ops optional	2020-07-19 18:16:41 -07:00
vmw_vsock	vsock: fix potential null pointer dereference in vsock_poll()	2020-08-12 12:56:06 -07:00
wimax
wireless	cfg80211: Adjust 6 GHz frequency to channel conversion	2020-08-27 10:53:21 +02:00
x25	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
xdp	xdp: Prevent kernel-infoleak in xsk_getsockopt()	2020-07-28 12:50:15 +02:00
xfrm	A set of locking fixes and updates:	2020-08-10 19:07:44 -07:00
compat.c	net/scm: Fix typo in SCM_RIGHTS compat refactoring	2020-08-07 12:43:25 -07:00
devres.c	net: devres: rename the release callback of devm_register_netdev()	2020-06-30 15:57:34 -07:00
Kconfig	net: ethtool: Remove PHYLIB direct dependency	2020-07-07 15:41:05 -07:00
Makefile	net: move devres helpers into a separate source file	2020-05-23 16:56:17 -07:00
socket.c	net: Fix some comments	2020-08-27 07:55:59 -07:00
sysctl_net.c