netdev - Re: [PATCH 0/6] pull request (net): ipsec 2022-11-23

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Thu, 24 Nov 2022 18:38:55 +0100
From:   Alexander Lobakin <alexandr.lobakin@...el.com>
To:     Steffen Klassert <steffen.klassert@...unet.com>
Cc:     Alexander Lobakin <alexandr.lobakin@...el.com>,
        David Miller <davem@...emloft.net>,
        Jakub Kicinski <kuba@...nel.org>,
        Herbert Xu <herbert@...dor.apana.org.au>,
        netdev@...r.kernel.org
Subject: Re: [PATCH 0/6] pull request (net): ipsec 2022-11-23

From: Steffen Klassert <steffen.klassert@...unet.com>
Date: Wed, 23 Nov 2022 10:31:10 +0100

> 1) Fix "disable_policy" on ipv4 early demuxP Packets after
>    the initial packet in a flow might be incorectly dropped
>    on early demux if there are no matching policies.
>    From Eyal Birger.
> 
> 2) Fix a kernel warning in case XFRM encap type is not
>    available. From Eyal Birger.
> 
> 3) Fix ESN wrap around for GSO to avoid a double usage of a
>     sequence number. From Christian Langrock.
> 
> 4) Fix a send_acquire race with pfkey_register.
>    From Herbert Xu.
> 
> 5) Fix a list corruption panic in __xfrm_state_delete().
>    Thomas Jarosch.
> 
> 6) Fix an unchecked return value in xfrm6_init().
>    Chen Zhongjin.
> 
> Please pull or let me know if there are problems.
> 
> Thanks!
> 
> The following changes since commit 1d22f78d05737ce21bff7b88b6e58873f35e65ba:
> 
>   Merge tag 'ieee802154-for-net-2022-10-05' of git://git.kernel.org/pub/scm/linux/kernel/git/sschmidt/wpan (2022-10-05 20:38:46 -0700)
> 
> are available in the Git repository at:
> 
>   git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master
> 
> for you to fetch changes up to 40781bfb836eda57d19c0baa37c7e72590e05fdc:
> 
>   xfrm: Fix ignored return value in xfrm6_init() (2022-11-22 07:16:34 +0100)
> 
> ----------------------------------------------------------------
> Chen Zhongjin (1):
>       xfrm: Fix ignored return value in xfrm6_init()
> 
> Christian Langrock (1):
>       xfrm: replay: Fix ESN wrap around for GSO
> 
> Eyal Birger (2):
>       xfrm: fix "disable_policy" on ipv4 early demux
>       xfrm: lwtunnel: squelch kernel warning in case XFRM encap type is not available
> 
> Herbert Xu (1):
>       af_key: Fix send_acquire race with pfkey_register
> 
> Thomas Jarosch (1):
>       xfrm: Fix oops in __xfrm_state_delete()
> 
>  net/core/lwtunnel.c     |  4 +++-
>  net/ipv4/esp4_offload.c |  3 +++
>  net/ipv4/ip_input.c     |  5 +++++
>  net/ipv6/esp6_offload.c |  3 +++
>  net/ipv6/xfrm6_policy.c |  6 +++++-
>  net/key/af_key.c        | 34 +++++++++++++++++++++++-----------
>  net/xfrm/xfrm_device.c  | 15 ++++++++++++++-
>  net/xfrm/xfrm_replay.c  |  2 +-
>  8 files changed, 57 insertions(+), 15 deletions(-)

(for the whole PR)

Reviewed-by: Alexander Lobakin <alexandr.lobakin@...el.com>

Thanks,
Olek