--- zzzz-none-000/linux-4.4.60/net/ipv6/netfilter/ip6_tables.c 2017-04-08 07:53:53.000000000 +0000 +++ jet-2400-727/linux-4.4.60/net/ipv6/netfilter/ip6_tables.c 2021-03-17 14:36:41.000000000 +0000 @@ -425,6 +425,10 @@ } if (table_base + v != ip6t_next_entry(e) && !(e->ipv6.flags & IP6T_F_GOTO)) { + if (unlikely(stackidx >= private->stacksize)) { + verdict = NF_DROP; + break; + } jumpstack[stackidx++] = e; }