> From our CVE tracker, only Trusty and Zesty need this patch
> and it can be cherry-picked for both of them.
> This patch fixes an use after free issue in xt_TCPMSS.
> Eric Dumazet (1):
> netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
> net/netfilter/xt_TCPMSS.c | 6 +++++-
> 1 file changed, 5 insertions(+), 1 deletion(-)