This patch fixes a problem with ipt_recent [CVE-2005-2873].

If you've been experiencing connection problems when using iptables --recent feature for per-ip rate limiting, this can help. Problems can surface in after as little as 25 days of uptime (much longer on linodes with timer = 100).

Here's a description by the author of the patch:
http://www.kd.cz/~martin/kernel-recent/readme

Here's the patch for kernel 2.6.14:
http://www.kd.cz/~martin/kernel-recent/ ... t_recent.c
http://www.kd.cz/~martin/kernel-recent/ ... ent.c.orig
http://www.kd.cz/~martin/kernel-recent/ ... ecent_diff

He also has a patch for kernel 2.6.9 which he's been using since Feb 2005 here:
http://www.kd.cz/~martin/kernel-recent/2.6.9/