--- zzzz-none-000/linux-4.4.60/net/ipv4/netfilter/arp_tables.c 2017-04-08 07:53:53.000000000 +0000 +++ scorpion-7490-727/linux-4.4.60/net/ipv4/netfilter/arp_tables.c 2021-02-04 17:41:59.000000000 +0000 @@ -329,6 +329,10 @@ } if (table_base + v != arpt_next_entry(e)) { + if (unlikely(stackidx >= private->stacksize)) { + verdict = NF_DROP; + break; + } jumpstack[stackidx++] = e; }