Re: [PATCH -stable,6.5 0/5] Netfilter stable fixes for 6.5

On Fri, Sep 22, 2023 at 06:02:51PM +0200, Pablo Neira Ayuso wrote:

Hi Greg, Sasha,

The following list shows patches that you can cherry-pick to -stable 6.5. I am using original commit IDs for reference:

1. 7ab9d0827af8 ("netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention")

2. 4e5f5b47d8de ("netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC")

3. 1d16d80d4230 ("netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails")

4. 7606622f20da ("netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration")

5. 44a76f08f7ca ("netfilter: nf_tables: fix memleak when more than 255 elements expired")

Please, apply.

Queued up this and the rest of the patches you send for 5.10+, thanks!