diff options
| author | Minhong He <heminhong@kylinos.cn> | 2025-08-15 14:38:45 +0800 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2025-08-18 17:35:50 -0700 |
| commit | 84967deee9d9870b15bc4c3acb50f1d401807902 (patch) | |
| tree | 828bbbf7d36a95fdf4dc1a75187c6925ac860b38 /scripts/patch-kernel | |
| parent | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM (diff) | |
| download | linux-84967deee9d9870b15bc4c3acb50f1d401807902.tar.gz linux-84967deee9d9870b15bc4c3acb50f1d401807902.zip | |
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
The seg6_genl_sethmac() directly uses the algorithm ID provided by the
userspace without verifying whether it is an HMAC algorithm supported
by the system.
If an unsupported HMAC algorithm ID is configured, packets using SRv6 HMAC
will be dropped during encapsulation or decapsulation.
Fixes: 4f4853dc1c9c ("ipv6: sr: implement API to control SR HMAC structure")
Signed-off-by: Minhong He <heminhong@kylinos.cn>
Reviewed-by: Kuniyuki Iwashima <kuniyu@google.com>
Link: https://patch.msgid.link/20250815063845.85426-1-heminhong@kylinos.cn
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'scripts/patch-kernel')
0 files changed, 0 insertions, 0 deletions