Re: [PATCH nf v2 0/2] ipvs: csum validations, part 2
Julian Anastasov <[email protected]> Wed, 29 Jul 2026 00:39:03 +0300 (EEST)
| Newsgroups | org.kernel.vger.lvs-devel,org.kernel.vger.netfilter-devel |
|---|---|
| Message-ID | <[email protected]> |
Hello, On Tue, 28 Jul 2026, Julian Anastasov wrote: > This patchset contains more fixes after the > previous batch of fixes for checksum validations. > > The first patch avoids reading the IPv4 ihl field > multiple times to prevent local attacker to cause > out-of-bounds write in ip_vs_nat_icmp. > > The second patch returns the checksum validations > which can be needed for the FORWARD hook. > > Julian Anastasov (2): > ipvs: avoid out-of-bounds write in ip_vs_nat_icmp > ipvs: return the csum validation for forward hook There is something more to fix, will send v3: https://sashiko.dev/#/patchset/20260728202520.59179-1-ja%40ssi.bg pw-bot: changes-requested Regards -- Julian Anastasov <[email protected]>