Description: netfilter: ctnetlink: add a range check for l3/l4 protonum
References:
 https://twitter.com/grsecurity/status/1303646421158109185
 https://patchwork.ozlabs.org/project/netfilter-devel/patch/20200908150947.12623-2-pablo@netfilter.org/
Notes:
Bugs:
upstream: pending [1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6]
4.19-upstream-stable:
4.9-upstream-stable:
sid:
4.19-buster-security:
4.9-stretch-security: