Skip to content

Regression in 6.11.4 breaks ip6tables MARK extension

Description:

A regression introduced in the linux package version 6.11.4 prevents the use of the MARK extension in ip6tables (both nftables and legacy versions). When attempting to use the MARK extension, the following warning is displayed:

Warning: Extension MARK revision 0 not supported, missing kernel module?

NOTE: This issue is specific to ip6tables (IPv6). The iptables (IPv4) functionality remains unaffected and works correctly.

Additional info:

  • package version(s):
    • iptables-nft: 1.8.10-2
    • linux: 6.11.4

This issue has been tested on a clean installation

Steps to reproduce:

Execute the following command as root to test the MARK extension in ip6tables

ip6tables -t mangle -I PREROUTING -j MARK --set-mark 1

The command fails with the output:

Warning: Extension MARK revision 0 not supported, missing kernel module?
ip6tables v1.8.10 (nf_tables):  RULE_INSERT failed (No such file or directory): rule in chain PREROUTING
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information