Re: [PATCH nf] netfilter: nft_set_rbtree: reject expired interval ends

[Pablo Neira Ayuso]

On Tue, Oct 06, 2026 at 03:17:06PM +0200, Jérémy Jean wrote:
> On 2026-10-06 01:05, Pablo Neira Ayuso wrote:
[...]
> > Can you test this fix instead? Thanks
> 
> Hello Pablo,
> 
> Thanks for this improved fix. I replayed the reproducer I had that triggers
> the
> bug on the kernel that includes your patch, and I confirm that it fixes the
> UAF.

Thanks for testing, I posted a patch for submission here:

https://patchwork.ozlabs.org/project/netfilter-devel/patch/20261007220358.1140284-1-pablo@xxxxxxxxxxxxx/