From nobody Mon Aug 3 15:04:05 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDKh64nZQz6mJng for ; Mon, 03 Aug 2026 15:04:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDKh62P5Cz45Z8 for ; Mon, 03 Aug 2026 15:04:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785769446; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=IJJKxkPslsPil2b2yBwRD+ApR1R9lvFYDqIk75/9xrI=; b=oUoA0IV4BfY8hjEzc79Flt0ntN/iWAr99cpC029wFlnXMZORCG3+uI/HpGd3vX5r9TS6gt 6eH9dBUg10fTR5Pco+UK+/zmyRtLalEwpZIzoS7lyqc8uA6GKm6jMswQumugw9deH/YR4j dWFqBBLM/K1ZrLjAdIjAG8acseKM8xDbJY1BJh149bnrybMAHPPwLmFN6fIOIYFbdPAm97 1hsVxp4/KzgPrxUT8ofL9LQCR0h40fHrGt5QdCvt5mvY+vpJ6IsNom9+ZmdxP2VitNTdHs +PwxRQHHVzKgjB1cDZ0f675+zrtrCJKpXQNeOxw2sOzys8V1oe5D7gLzNqQBIQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785769446; a=rsa-sha256; cv=none; b=Zl0XIwxeJ2jkrhJx9HnmkcE4Gtm3G0Skw2VBvMa3gEZU7VfaZcV11tpZAaIodMGLmYfMc9 xfyKurf/tuz34ibJemC+J91d6Lj+0F0LkZhaYLAE/dC/+1CDKAOidLUIM+ECmvcQtUyKpX QWViie/g4b9JMz5JUZxecEiotOtCCtC32d1fr3HkT/jbJ6SLPIfK2tMKOZ6PqqfVZkaNe5 hwGr8CnUgF/GiuKUQg0MsQEyNT9qiBjgqEKOsWF/vMPtJK8rq0OC8QM4eDjPX60AAwfL2c jkp1ZXTkKaabL30+f9xCYBjfUTFHTU2CGeUjZYT0ohfjE5VY3odPGEqtHgua2Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785769446; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=IJJKxkPslsPil2b2yBwRD+ApR1R9lvFYDqIk75/9xrI=; b=u1x1jPFyo25dtvXMZTXH1hC7rngF6Mac8XtCpQehaC/x60/wOkBq3/UZh7ndxo9vWSzPFQ AJc/TWr+NBzqxJ/cbg4pcWerVI+BywSgFVU7KHbBYp07bJFWYzsM4VnOWm+FYKE848LyT/ 6S9t1JQS5rddRE0aIHm/Xxm4Qc9rTpl9MdZGGiM2CS4yueWcUwEB5Eb73dWKB6ax18DHCN ITMa9BWXnoykpug/PwcbX6Ax9GMO3ay3RG+AdKMUjsoLAlTszH+Mglu5E1uaI9oyCysH2R iidiObLGhtrbYuErpAbi39JPAJXN5fezKTgPj4uUqxTtI4wZtLmEF15+8f77Dg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hDKh61PC1z14yt for ; Mon, 03 Aug 2026 15:04:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 673F46e5079870 for ; Mon, 3 Aug 2026 15:04:06 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 673F463v079869 for pf@FreeBSD.org; Mon, 3 Aug 2026 15:04:06 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 290811] pf panic on kldload Date: Mon, 03 Aug 2026 15:04:05 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-STABLE X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: linimon@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: pf@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: attachments.mimetype Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D290811 Mark Linimon changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #265179|application/x-troff-man |text/plain mime type| | --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon Aug 3 16:02:44 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDLzn29zwz6mR6K for ; Mon, 03 Aug 2026 16:02:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDLzm5vBCz3Q6d for ; Mon, 03 Aug 2026 16:02:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785772964; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=B1qWhRAAo5DtHyDCrYkwiD/d/p5ktp2WekjLqpW+aI8=; b=uf3IqCeMLZk47d5S/WihQ4ErOIC2kasrj+E6GFrz9TOJmyae0HG76MX+XGl15xR2GNzKsA 8sgVTJcZfdvR02eFcEjPPcxJ8UxrDlRk0kN3JZN4n3DYXQZfdohYJI6LoZ58zmC7IELErl HtfnmRIts/mzfpf36h98ut+X2C8Z5Ny5M9VNdiG3rrejA3J5Gh1n1GxaSRysPR5aY2NHAo Y5MUTVl67Jht+90ELvCU18EGO96/easabboIeLinhFRXNMulv7nHm6NL3GuZ1gk/XYHyIN tHy9G8YQBXERUXrPhDRlsanAZFx4cWUjv/PeBgBdfpTzcfq6J7CSD8iBeDtBAA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785772964; a=rsa-sha256; cv=none; b=hlL0sTN3MEP+zCmu7RHvBOoxT9SRc8zn6GgGWe0kpjYHUDZLoISjcrTGCk4DgUTSc7jn7E RNnoLYBFTFVj3tnBQRCU+DTOjIaPeDOJUuFuHp49yTjX93GgQVmc4kc2cYujKzuHaQKyo0 3Nsr30/B0bypt7+i8M0snJ7Bg61gNgr8e5ivN9vkdjwKiL5kHS3lj7pON9zPP6hKEBm0bc OM2MsUOsSEVo6q0iaPMp7by+nteY3NkbjwJ7w4TkjBhwaNfHsGyBPc7JBuEjSaroyYsnwy Dk9ZGiBbVfjQpP5bShxS+hz2fyhAnxDDZAnx7N6yEeQ8asrMGYzC6oRn8eeYNg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785772964; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=B1qWhRAAo5DtHyDCrYkwiD/d/p5ktp2WekjLqpW+aI8=; b=vOzDpCbKMtvclnoPOasCHfCzBmFoBJR5wGG+tqZDbAgRtlbeNT9uDaQdBlKMjAPRWi/3Ks SW+bSYBTslegmUwI22JWPlko/ZBBaTIIhK00m9yIpvkZ0tCPoZbi2n5/9E0fm84oicfsp/ K0GlxN+fCfQUyye8QQFWZ+1TT6/Yl4hykVgNUl37+05Do4m/6JvwTFdT9y3Bp+QdtS/ch/ g5VeQPR+jmpqmfmo52FLrWSxSI4M9DcnLUb1QHpCoo1lC5xTcRK/eTRoa1UXcxQglXoNJR Vk/3rHmjXqT2Ue5/anLsN0thCz4O/mGmpS35YaqTIHO5RQqcx+TvrMv4UWIe7A== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hDLzm4zK5z178d for ; Mon, 03 Aug 2026 16:02:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 673G2iOp069931 for ; Mon, 3 Aug 2026 16:02:44 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 673G2iI4069930 for pf@FreeBSD.org; Mon, 3 Aug 2026 16:02:44 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 296838] pf: cannot reload ruleset in securelevel 2 Date: Mon, 03 Aug 2026 16:02:44 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.1-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: pf@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D296838 --- Comment #10 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3Dd13dffa150d17dc239e164ea42ddab91e= 6fab466 commit d13dffa150d17dc239e164ea42ddab91e6fab466 Author: Kristof Provost AuthorDate: 2026-07-21 13:03:24 +0000 Commit: Kristof Provost CommitDate: 2026-08-03 16:00:04 +0000 pf: fix securelevel off-by-one cmd_securelevel is the securelevel at which the call should be denied. pf (write) calls should be denied at level 3 or up (not at 2 or up as it was), so increment these all by one. PR: 296838 MFC after: 4 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D58377 sys/netpfil/pf/pf_nl.c | 94 +++++++++++++++++++++++++---------------------= ---- 1 file changed, 47 insertions(+), 47 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Tue Aug 4 13:29:31 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDvXX16STz6nFVh for ; Tue, 04 Aug 2026 13:29:32 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDvXW60sgz3FTn for ; Tue, 04 Aug 2026 13:29:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785850171; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=BS6VpfYkY6QU/bHGgRMViZhNOhZSxPROVXf7PVaUpXo=; b=FUQJDyLCJCDnWuKdqDf2ZC0/SDDZo3VUvfcV9uJEx4Pg/1daIm5966bzX2IOrJ03yktKKT tbqhCqsb4yis84qsdQ7otcLpBBxYRmRzjLiEVF5aF1ar1O6BKL2XyB/RwtOZ731Ju6VCGI PXx836bgPy/Bje+VXhZvRkQameriupl5zcVF5h2JRimlLOwU55K9ZOy4n615hChsk4o+vf pW8435F6yrQ+rHZc+a0hHXzTTLGBMaT5DtsEGr1tVC93th+Y1A3ddruS9Ew2rrhcDLMKxH DlSOSxXh2HJHjLpAuPiwmXa4JzMWxBgnIee4IrmtLH7IGPjDbDFxAsHoT5c/qA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785850171; a=rsa-sha256; cv=none; b=dkPnbFdTW7v3pLlP+5rjub6dl9JxtBQ1BUr+tnS7oPetjy5t12+z8QQxJFGVVGYu2Ae0kP ByVtVIfK804FHGmZsuG652XI372yzCWjpoXM5loElqYQfrN8hCEWLu3/2qRollwWqeyBZY F/uy154bmVRi6pgQNS8sBGpdmBAhJqtJEZcfYeHj6nhBrq67J9T2TnenjdxEMb9dWXr1SH Iz4pFxPgkcpsR6cGI69v8HkMuaDTUR7xFvfpOyQ7H3cWiML50jJ1PIJFezP6OcjcG8viQx 2521JxCwSWKgE3Y5oQag+GLkYxbh33X2K0LYknG/ILU74dVcc9++FtItm/8C5w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785850171; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=BS6VpfYkY6QU/bHGgRMViZhNOhZSxPROVXf7PVaUpXo=; b=QdGQpFolfchFEFbQM1En+SFZaUHhP+M3K62dVo1EBmrkJND29sDdrVlP5+7Y32EOQesX1O wwIjg1DWt+NwcykVXzbfQECO+z6cxMykWtvkIWHX51mhn+0GWHqNGz60uycO7Cu5nWVkp/ v2M37VWs/Tw3fefqH5wEaz/APhI5krvziw8T0zQtaM1wv9gXXsWepljvL6RmvrOTMgr6jQ ztqB/zW6aG7Rlbr/PN0BIKQbmMb+1F0AwjtktVWPFXGABtyyfy3BxOi8wUZ11N6NnyCQwI o1ZQkUn67mxGIUnYFEH1EOscfx6ay8f1gpdBz19LoQ1h8mWAf1yV642mqvMu1g== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hDvXW4X07zpFR for ; Tue, 04 Aug 2026 13:29:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 674DTVSP015079 for ; Tue, 4 Aug 2026 13:29:31 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 674DTVl8015078 for pf@FreeBSD.org; Tue, 4 Aug 2026 13:29:31 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 297264] Exploitable bug in PF_KEY? Date: Tue, 04 Aug 2026 13:29:31 +0000 X-Bugzilla-Reason: AssignedTo CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.1-RELEASE X-Bugzilla-Keywords: security X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: linimon@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: pf@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: assigned_to keywords cc flagtypes.name Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297264 Mark Linimon changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs@FreeBSD.org |pf@FreeBSD.org Keywords| |security CC| |pf@FreeBSD.org Flags| |maintainer-feedback?(pf@Fre | |eBSD.org) --=20 You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug.= From nobody Tue Aug 4 13:29:31 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDvXW5KMKz6nFBc for ; Tue, 04 Aug 2026 13:29:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDvXW4K00z3FTm for ; Tue, 04 Aug 2026 13:29:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785850171; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=KhxahB+KYcbgm2Rod2v8wg6djzXdpCDd1++V4/NsKO8=; b=EpCIEWzvcBDy9V9JyBZm7TgurtqGoEL2FxdB1xycJj87SuvTw4nT4o7L0T9NKPTJlIE0DN lKc9Mb4gXyGbaK8ZbQBCjGNhwWqmL1bAKMUosN6jb7mkYIv/x4jCvpv/aqk/EpEk7AFCo+ RkW29PdnrlwjAOKVQ9fX3zLkZIevLmKJv8H4NqFoaYbD+mswS3ip0E9lhLAD7GvJSr10uF gj9kEmBLTDiV4nDERlqor6uDCLqPqW8A7IU0PsKI74c3IxnslxVJH1/MNwfzPiYOLcM7Hq f1w32e5HILO91X3QPXVuY1eesBFxLNdjFA2OXLbuNYTwxOiHgCgkh12+ZzVEAQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785850171; a=rsa-sha256; cv=none; b=Emsqxj6vzc+1ZOXz5KZ/TJqst/7oZRrZ2yctiQHZStecmWZk8nkizlWNfzz1D5wgKCEYQg lhDlLXX8wxo70hO+cTeBQ6ioWGWzwaAkwEnPicbh23t4l4P9weqk11TBqYcrfSbrDvv1pD ay1phfJb7pm5Mkdb2HuX+sPDQah9Tgt+2JqbWIakkfq7qn4NNnTfS+PFwLn/OUFgIEE9kL ys2dvuu+hjRKViPQSK1rpmCL3FYAhEdXgiUhfl7xm+kC9SCGzTfN7uUjw4EzdXbzykFlwk ODxxNi2JQDlwyoAMM++tdUTw7ijkM3/UKSXAMB+JsKiyG4CVUmJ2xVjaOQrYXw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785850171; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=KhxahB+KYcbgm2Rod2v8wg6djzXdpCDd1++V4/NsKO8=; b=VtO/3Nyq3T8T8zSP+fq2YifinN7ombhFmbhYzKxWA4sNiaLDApSp3dMQpXo+oR6lDnDTjy eLr0gJmRiA4DD1DtfHasFui74L85Ql+npZkSTSRZnaOMjRvNWITXdJQv6et1aPwPoDfs4J mlBUeRgDHejhgk0DmzY0B0XiD1+Ia1H7iim8Yk48Hc/mWdILmG4nAvNwAoXB2+eS09kp2v QvsbmIFrKXmfOVsdTwzSqq9+TY5fTLPjY8TkySDeRX5OAAVDmmt2v/F6PzICDE4XKZxt+7 dRz9XB8m/mi+FfoNtyJDTZt9YtfKelR0vmmk/I0Mh/wGZjV5n/b0C72G8bBscw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hDvXW30jlzpgM for ; Tue, 04 Aug 2026 13:29:31 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 674DTVUA015071 for ; Tue, 4 Aug 2026 13:29:31 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 674DTVtR015070 for pf@FreeBSD.org; Tue, 4 Aug 2026 13:29:31 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: maintainer-feedback requested: [Bug 297264] Exploitable bug in PF_KEY? Date: Tue, 04 Aug 2026 13:29:31 +0000 X-Bugzilla-Type: request X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.1-RELEASE X-Bugzilla-Keywords: security X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: pf@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? Message-ID: In-Reply-To: References: X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Mark Linimon has asked freebsd-pf (Nobody) for maintainer-feedback: Bug 297264: Exploitable bug in PF_KEY? https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297264 From nobody Tue Aug 4 13:34:37 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDvfQ2S8jz6nFxQ for ; Tue, 04 Aug 2026 13:34:38 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDvfP70S0z3HL4 for ; Tue, 04 Aug 2026 13:34:37 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785850478; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=h9+MS1SJgkb+xAQpeHcieSbt3mBdcWaCN8CAYowQZGk=; b=rPQp4GQZ7CAMuQuhQEoOOWoGHDBTuK/2w9oXd8IOnQ0IP9vqJ2pIisYn3hQbS7tFyeaSHE OFWOcpCzmUVB+3XQg04S3v3aDDlkQFmauO3yvfjiKDaiMeKfXKfhWTGHr/52ZJHK6hWTME 3KrLtmI44Ol7gKB4KKZVYzgxmZH3V1Y9E8yrs6H6DTW9PGZT1hkvqJLRWuWuBh1JXUtGMY /jEYzuZG1BYBg/nvVGx6oybGG5U47oYc/2ePKzA+0AUclhm+MMYbrnyCY41AtH+nIxsBNv 81QO4xHF0PtSNqYE4Sq15QYZoaqifyb0lOx+7pxoYQYb4wF1LdaSCM07k2s1FQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785850478; a=rsa-sha256; cv=none; b=OYrySdfTGQYWtM5esgUXxVBtYT+i6Yjlw5XFC2r6tQRf/zp1nDjF9T+DG9y1WT4XRxZBmm fSyCOi6s+rJG/Nd01CuhcZsiqBvnOsrzx3OnjiQXVoYzddzqTlnR588hQfxY5F3Wnl/kiq OBxs0pCu8ZCnlUb+9cNhqOcgWhT4x4K7gOQgR4zTcNvqs8vatFEBf9css+6DhIZOZztZuD OgVYIt6o7Rgi9yej1/wzinPOG0kVCJ7ryQjgl+/8Ueb1TpZ2ESpSWPlURVdKC6rwFDGt+t tMNWDEL0eCz2rc+jTpEP71vlCRqf48XODYk6d6W2JjBehRr0p0nDdWemZTFeTQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785850478; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=h9+MS1SJgkb+xAQpeHcieSbt3mBdcWaCN8CAYowQZGk=; b=UcSzFtc9liGPY91ydYtpemKuJRFN2xCFkf6svPTSIBquRMlOp7AdKjgplZCHW51KqUovaU Fw7CsntCKsIIJdNbwEh983kaS88n69ANESu/Z0ipdg8ZMERymamUiyy2Qw6ctMnRwiGZag JNqMgSet0KY+aoAc204UyKYBCB4S2jkc9379xvjyhzjubHQnYqRi4tA3iY6Ccfb6qkpEe3 WhoAyNTnpyTfETciXfFyCUoR6H4NaGljDSxiaBbQR41EayxX3u3K14XJ/M1DYSc1an4Win wAd6saVg2su4fpPFz5iV1d9IBwpUqzSn6y87fBVBJyE6vGR4YuSL9RanSgWihA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hDvfP5ZSkzqFK for ; Tue, 04 Aug 2026 13:34:37 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 674DYbcG027045 for ; Tue, 4 Aug 2026 13:34:37 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 674DYbKx027043 for pf@FreeBSD.org; Tue, 4 Aug 2026 13:34:37 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 297264] Exploitable bug in PF_KEY? Date: Tue, 04 Aug 2026 13:34:37 +0000 X-Bugzilla-Reason: CC AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.1-RELEASE X-Bugzilla-Keywords: security X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: kp@freebsd.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: cc assigned_to Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297264 Kristof Provost changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kp@freebsd.org Assignee|pf@FreeBSD.org |net@FreeBSD.org --- Comment #2 from Kristof Provost --- Mark, this is about IPSec code, not pf. --=20 You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.= From nobody Tue Aug 4 15:56:35 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDypF23nvz6myFZ for ; Tue, 04 Aug 2026 15:56:37 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDypD5Kqjz3gRm for ; Tue, 04 Aug 2026 15:56:36 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785858996; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=95TgeRD8iy5F2zibo6bZ9R02GakcTSl+03w9KAb0BMU=; b=IFppts8un0SPJuR7cjMH4LfYLbIuYTj9FXp7jBn4MTTOq5FStkk42tns+J4kBDeWjc0HFI 2IaGwvKeUTeaHb63LgM9MgAaGDvBGTlttfPqq9VU0e7IngnC1tJuNdW+sJiGgtfH6wQ0nQ BzsnkE2zAt70B1ydyTEOJM9R7utUUKnNmDXeuvJEBhppHAdo54V07GAktacOI2WASwS2Iz vCXW4x7mZj7gEMTggJqWhHrb1OWQOMo5Uq99p+eBrGf9SCQMeVcFEvW1DaA6kZ69bQCI3D DKYN4HteaqF3TEzxVKV35WYCvJiBFkOFx02JkI4ly3VXIKJIlQ0n8rySTJB5lg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785858996; a=rsa-sha256; cv=none; b=jNy6W4PFsJnSzVx08y2+Nbjgsc1jOw2zgqoPBUTXFIPbtmJyXZvn6iMg06Kea1dPHP0WzF y8c8TNbQTYSloCWSKOzJjcUgeeZirKK9iAS1UaS0t0LDhHcsQqOwHlaVqvsgg9D9xLkoVO OEOMNIKBFvJHoupnxNQZiUyM9ftc682NlixYofOg9KETtvR7QSmomgvZpDborp+DVn7FiA gINVG80TRJ30mdxDFmRsCATEI+INNZpBBozU9chNEl+nWthUEUxHHPXnyZ10LImeCV4mE8 LfuDtfFz09ciCQi/g3MZxOauEo/s/ZQ7EXUahJ4vYuFvqMbFmF/orE6VPs0uZg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785858996; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=95TgeRD8iy5F2zibo6bZ9R02GakcTSl+03w9KAb0BMU=; b=mY3XG2QH1FV+D4M1NqH/Xg+1MCbNNkWTH/v5iIzxFCsHnIrmz/GkQzPmFbsCjikbrUSjQD cfQTvG7wxfS3qa/DKAR4uiFzsQNneah7RJ0T5DAh8vZi958fqqB/tJWW1hjh0j6hpfrQ9i R2XGBjOJMIVubSuOb7LpyllKNWZURbw4yO7I0oVombAoCMl1VUEKAlCqcHk6uHHXHyHPMA k80FLIZ8Cwk2fQHVgZ54t8CnsmEbGBpsKd9JLHN8O9mooWhmJ40mFapxKsbSss2hFpeCxw lCfaZAyvzypNHBkxz3DzhBy6uirpzAqsEIcVUHzMekpo93BD0PcKwitQaJn+aw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hDypD4Hn0ztb4 for ; Tue, 04 Aug 2026 15:56:36 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 674FuaSl041960 for ; Tue, 4 Aug 2026 15:56:36 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 674FuasK041959 for pf@FreeBSD.org; Tue, 4 Aug 2026 15:56:36 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 297264] Exploitable bug in PF_KEY? Date: Tue, 04 Aug 2026 15:56:35 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.1-RELEASE X-Bugzilla-Keywords: security X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: kib@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297264 --- Comment #3 from Konstantin Belousov --- The pfkey_lpe sample does not work for me. But I think that the issue is real, https://reviews.freebsd.org/D58646 --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Tue Aug 4 19:40:46 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hF3mv71Pzz6nJWZ for ; Tue, 04 Aug 2026 19:40:47 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hF3mt6dnlz3NLZ for ; Tue, 04 Aug 2026 19:40:46 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785872447; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ICfM46FVlgUdJCJGC3+y6FExjfmS2y2PDO/13vLH7+g=; b=sOCmaWRjDfcI/vK03Q4IV8cOihhRjJPUAaSdKzFB1ayjYHO71A6GzT4cNURu6QU+J9J6LT zib7iRi5BWMb5qm5Kc29SZ697YX/1roMmMEwMz9dkwbVnLF/fGieI3co5NYK6e5TJSg5Uj QnBfN3f2A9j6uFVZ48+ZiKQl77ZoLiMexaOwsdeLLJLyHdibq9QQcWQzafazU4Iui66Rhc /jHBXp/wlKLNUj8ucoDG5LGW2e7qQ/j2v+tlvnch0/chTj9URdjbafbW07JQZuicbn7QPO zAVsIMWNmofIvkf/36/B51e8eqB5EEpTSLcNHpF30zW9cR3KTDyzrzIPk2o+Zw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785872447; a=rsa-sha256; cv=none; b=CGJAy8iD2v7ZAQcOn1zSbEVY/c95G4XzRtqaBoQ3s8kycngZ2nN3CRSWDyhces7QJKijSh 3WQSvW9oIJ2pjZlImOLrUkvjZ42pJ2xUZ2L6g6mxAKSbgSrD41japKmn+TQn5d4BSowza5 LItSI0stLuUV80E2T7xaMWqPR8Jkip9P21bjpoh0ip3z6KKPZGxojuSs5akhNdtVHfKFbf o31PjX6Aud5JhMoWnwNAvAaYBQUOjZSSa8Li9SYsIzWKARskJbh2oRHQRUbanyrk261cfh 2K9s+mFEr5RBbXTmgiiwH/vtBtqTcY72Yx5h7Au5fkKHUwcOK1J3n78cgWb4/w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785872447; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ICfM46FVlgUdJCJGC3+y6FExjfmS2y2PDO/13vLH7+g=; b=E45YvjkORQFq4sp4QODJJYx2QXB2pSizwWqgGwgZq2KnR8aqwamFDba/J/5/9FxCzgW2EK EGwGfG6LlOMVa3Jeyps14B01xoRtkNHk+8L8rZe4sBQlcypefp6gbVw9y0h2+2Kl4zIrAs 7p5XRoGGZ5EBaMye4ZRqiZq3RkqRgT1E1eTrcLM+uJH/Bk/AGzLl8C+Lm28lJ8avIeNSC5 wwiL5qKJ036YrSO8Z89LR0tuUoV9XBkMwijh4Z44HZyFoLORLl2QvUQPBBf6WMDFSN6rcn ONavTkwWgt2By6dLUVctPvwv49EsrW6/ASfIYZpShurqi6hWrQiGIbJcpwdBeg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hF3mt55H3z11c0 for ; Tue, 04 Aug 2026 19:40:46 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 674JekGo095033 for ; Tue, 4 Aug 2026 19:40:46 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 674Jek8k095032 for pf@FreeBSD.org; Tue, 4 Aug 2026 19:40:46 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 297264] Exploitable bug in PF_KEY? Date: Tue, 04 Aug 2026 19:40:46 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.1-RELEASE X-Bugzilla-Keywords: security X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: rbranco@suse.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297264 --- Comment #4 from Ricardo Branco --- Blog entry: https://afflicted.sh/blog/posts/pfkey-sa-len-overflow.html --=20 You are receiving this mail because: You are on the CC list for the bug.=