mirror of
https://github.com/torvalds/linux.git
synced 2026-05-31 18:43:33 +02:00
skb_tunnel_check_pmtu() can change skb->head.
Reusing old_iph afer skb_tunnel_check_pmtu() can cause an UAF.
Use instead ip_hdr(skb) as done in drivers/net/bareudp.c
and drivers/net/geneve.c.
Found by Sashiko.
Fixes:
|
||
|---|---|---|
| .. | ||
| Makefile | ||
| vxlan_core.c | ||
| vxlan_mdb.c | ||
| vxlan_multicast.c | ||
| vxlan_private.h | ||
| vxlan_vnifilter.c | ||