Thread (12 messages) read the whole thread 12 messages, 4 authors, 6d ago

Re: [PATCH net 0/5] vxlan: fixes for skb header pulling, cloning, and concurrency in TX path

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-07-27 22:20:49

Hello:

This series was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:

On Thu, 23 Jul 2026 14:42:44 +0000 you wrote:
While working on RTNL-less fill_info for vxlan, Sashiko found annoying
pre-existing issues, adding noise to an already complex work.

This series addresses some of them in VXLAN transmit path,
primarily within route_shortcircuit(), header validation, and neighbour lookup.

Patch 1 fixes a potential use-after-free in vxlan_xmit() caused by caching
the Ethernet header pointer ('eth') before calling route_shortcircuit(), which
can reallocate skb->head via pskb_may_pull().

[...]
Here is the summary with links:
  - [net,1/5] vxlan: re-fetch eth header after route_shortcircuit()
    https://git.kernel.org/netdev/net/c/1395a676ec15
  - [net,2/5] vxlan: unclone skb head before modifying eth header in route_shortcircuit()
    https://git.kernel.org/netdev/net/c/760d36e737f2
  - [net,3/5] vxlan: use neigh_ha_snapshot() in route_shortcircuit()
    https://git.kernel.org/netdev/net/c/8eca411347e1
  - [net,4/5] vxlan: use pskb_network_may_pull() in route_shortcircuit()
    https://git.kernel.org/netdev/net/c/26bb2dd0a883
  - [net,5/5] vxlan: use pskb_network_may_pull() for transmit path header pulls
    https://git.kernel.org/netdev/net/c/b9553558b48d

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help