[PATCH nf v2 0/2] ipvs: csum validations, part 2

Julian Anastasov <[email protected]> Tue, 28 Jul 2026 23:25:18 +0300
Newsgroups org.kernel.vger.lvs-devel,org.kernel.vger.netfilter-devel
Message-ID <[email protected]>
	Hello,

        This patchset contains more fixes after the
previous batch of fixes for checksum validations.

        The first patch avoids reading the IPv4 ihl field
multiple times to prevent local attacker to cause
out-of-bounds write in ip_vs_nat_icmp.

        The second patch returns the checksum validations
which can be needed for the FORWARD hook.

Julian Anastasov (2):
  ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
  ipvs: return the csum validation for forward hook

 include/net/ip_vs.h                   | 32 +--------
 net/netfilter/ipvs/ip_vs_core.c       | 94 +++++++++++++++++----------
 net/netfilter/ipvs/ip_vs_proto_sctp.c |  2 +-
 net/netfilter/ipvs/ip_vs_xmit.c       |  2 +-
 4 files changed, 66 insertions(+), 64 deletions(-)

-- 
2.55.0