Sync fips legacy 8 compliant 4.18.0 425.13.1.el8.ciqfipscompliant.36.1#15

Open

PlaidCat wants to merge 49 commits intoFIPS-8-plusfrom

sync_fips-legacy-8-compliant_4.18.0-425.13.1.el8.ciqfipscompliant.36.1

Commits on Nov 22, 2024

ionic: clean interrupt before enabling queue to avoid credit race

gvrose8192
authored and
PlaidCat
committed
ionic: fix use after netif_napi_del()

gvrose8192
authored and
PlaidCat
committed
netfilter: nftables: add catch-all set element support

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: Remove spurious code

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: integrate pipapo into commit protocol

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: disallow element updates of bound anonymous sets

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: disallow updates of anonymous sets

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: disallow timeout for anonymous sets

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: add nft_chain_add()

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: report use refcount overflow

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: fix spurious set element insertion failure

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: don't skip expired elements during walk

gvrose8192
authored and
PlaidCat
committed
netfilter: nftables: rename set element data activation/deactivation functions

gvrose8192
authored and
PlaidCat
committed
netfilter: nftables: add nft_pernet() helper function

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: GC transaction API to avoid race with control plane

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: adapt set backend to use GC transaction API

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: remove busy mark and gc batch API

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: fix false-positive lockdep splat

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: fix kdoc warnings after gc rework

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: don't fail inserts if duplicate has expired

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: GC transaction race with netns dismantle

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: GC transaction race with abort path

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: use correct lock to protect gc_list

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: fix out of memory error handling

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: defer gc run if previous batch is still pending

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: fix nft_trans type confusion

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: disallow element removal on anonymous sets

gvrose8192
authored and
PlaidCat
committed
netfilter: nftables: update table flags from the commit phase

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: fix table flag updates

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: disable toggling dormant table state more than once

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: fix memleak when more than 255 elements expired

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: set backend .flush always succeeds

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: bail out on mismatching dynset and set expressions

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: disallow anonymous set with timeout flag

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: use timestamp to check for set element timeout

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: honor table dormant flag from netdev release event path

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: release batch on table validation from abort path

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: __nft_expr_type_get() selects specific family type

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: do not compare internal table flags on updates

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: flush pending destroy work before exit_net release

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: reject new basechain after table flag update

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: reject table flag and netdev basechain updates

gvrose8192
authored and
PlaidCat
committed
netfilter: nf_tables: discard table flag update with pending basechain deletion

gvrose8192
authored and
PlaidCat
committed