Re: [PATCH net 0/5] vxlan: fixes for skb header pulling, cloning, and concurrency in TX path
From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-07-27 22:20:49
Hello: This series was applied to netdev/net.git (main) by Jakub Kicinski [off-list ref]: On Thu, 23 Jul 2026 14:42:44 +0000 you wrote:
While working on RTNL-less fill_info for vxlan, Sashiko found annoying
pre-existing issues, adding noise to an already complex work.
This series addresses some of them in VXLAN transmit path,
primarily within route_shortcircuit(), header validation, and neighbour lookup.
Patch 1 fixes a potential use-after-free in vxlan_xmit() caused by caching
the Ethernet header pointer ('eth') before calling route_shortcircuit(), which
can reallocate skb->head via pskb_may_pull().
[...]
Here is the summary with links:
- [net,1/5] vxlan: re-fetch eth header after route_shortcircuit()
https://git.kernel.org/netdev/net/c/1395a676ec15
- [net,2/5] vxlan: unclone skb head before modifying eth header in route_shortcircuit()
https://git.kernel.org/netdev/net/c/760d36e737f2
- [net,3/5] vxlan: use neigh_ha_snapshot() in route_shortcircuit()
https://git.kernel.org/netdev/net/c/8eca411347e1
- [net,4/5] vxlan: use pskb_network_may_pull() in route_shortcircuit()
https://git.kernel.org/netdev/net/c/26bb2dd0a883
- [net,5/5] vxlan: use pskb_network_may_pull() for transmit path header pulls
https://git.kernel.org/netdev/net/c/b9553558b48d
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html