Re: [PATCH net v2] netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
From: Florian Westphal
Date: Fri Aug 22 2025 - 03:51:23 EST
Wang Liang <wangliang74@xxxxxxxxxx> wrote:
> When send a broadcast packet to a tap device, which was added to a bridge,
> br_nf_local_in() is called to confirm the conntrack. If another conntrack
> with the same hash value is added to the hash table, which can be
> triggered by a normal packet to a non-bridge device, the below warning
> may happen.
I placed this in nf.git:testing.
In case netdev maintainers want to take it directly:
Acked-by: Florian Westphal <fw@xxxxxxxxx>