[PATCH nf v2 0/2] ipvs: csum validations, part 2
Julian Anastasov <[email protected]> Tue, 28 Jul 2026 23:25:18 +0300
| Newsgroups | org.kernel.vger.lvs-devel,org.kernel.vger.netfilter-devel |
|---|---|
| Message-ID | <[email protected]> |
Hello,
This patchset contains more fixes after the
previous batch of fixes for checksum validations.
The first patch avoids reading the IPv4 ihl field
multiple times to prevent local attacker to cause
out-of-bounds write in ip_vs_nat_icmp.
The second patch returns the checksum validations
which can be needed for the FORWARD hook.
Julian Anastasov (2):
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
ipvs: return the csum validation for forward hook
include/net/ip_vs.h | 32 +--------
net/netfilter/ipvs/ip_vs_core.c | 94 +++++++++++++++++----------
net/netfilter/ipvs/ip_vs_proto_sctp.c | 2 +-
net/netfilter/ipvs/ip_vs_xmit.c | 2 +-
4 files changed, 66 insertions(+), 64 deletions(-)
--
2.55.0