Re: [PATCH nf v2 0/2] ipvs: csum validations, part 2

Julian Anastasov <[email protected]> Wed, 29 Jul 2026 00:39:03 +0300 (EEST)
Newsgroups org.kernel.vger.lvs-devel,org.kernel.vger.netfilter-devel
Message-ID <[email protected]>
	Hello,

On Tue, 28 Jul 2026, Julian Anastasov wrote:

>         This patchset contains more fixes after the
> previous batch of fixes for checksum validations.
> 
>         The first patch avoids reading the IPv4 ihl field
> multiple times to prevent local attacker to cause
> out-of-bounds write in ip_vs_nat_icmp.
> 
>         The second patch returns the checksum validations
> which can be needed for the FORWARD hook.
> 
> Julian Anastasov (2):
>   ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
>   ipvs: return the csum validation for forward hook

	There is something more to fix, will send v3:

https://sashiko.dev/#/patchset/20260728202520.59179-1-ja%40ssi.bg

pw-bot: changes-requested

Regards

--
Julian Anastasov <[email protected]>