diff options
| author | Michael S. Tsirkin <mst@redhat.com> | 2026-10-07 18:42:49 -0400 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-10-08 11:03:47 -0700 |
| commit | 6785011f8b16abf40b1e9d8b2e332232b3e68822 (patch) | |
| tree | 777d8a04fab8b680e27e8bf8c4fb5d5c17227ca2 /tools/lib/python/kdoc/python_version.py | |
| parent | f8c8bd159a9bf626dd4921b7746ff481fce8c758 (diff) | |
| download | linux-next-6785011f8b16abf40b1e9d8b2e332232b3e68822.tar.gz linux-next-6785011f8b16abf40b1e9d8b2e332232b3e68822.zip | |
ipv4: validate checksum_start before completing checksum
If a packet with bad checksum metadata gets into the ipv4 stack,
skb_checksum_help can corrupt the network header and cause a bunch of
mischief.
This was discovered and reported by Paulos, and has been reporoduced
by others independently since.
We really shouldn't allow such packets in, but as a defence
in depth measure, let's also check before we complete the checksum.
A more complete validation at input is forthcoming, but needs more work.
Cc: stable@vger.kernel.org
Fixes: f43798c27684 ("tun: Allow GSO using virtio_net_hdr")
Fixes: bfd5f4a3d605 ("packet: Add GSO/csum offload support.")
Reported-by: Paulos Yibelo <habte.yibelo@gmail.com>
Closes: https://lore.kernel.org/netdev/20260922030310.8684-2-habte.yibelo@gmail.com/
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Willem de Bruijn <willemb@google.com>
Link: https://patch.msgid.link/0a012b4923e189c4c593ef4f471e5ff0edbe9030.1791412497.git.mst@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/lib/python/kdoc/python_version.py')
0 files changed, 0 insertions, 0 deletions