netdev - [PATCH 0/8] pull request (net-next): ipsec-next 2025-03-24

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250324061855.4116819-1-steffen.klassert@secunet.com>
Date: Mon, 24 Mar 2025 07:18:47 +0100
From: Steffen Klassert <steffen.klassert@...unet.com>
To: David Miller <davem@...emloft.net>, Jakub Kicinski <kuba@...nel.org>
CC: Herbert Xu <herbert@...dor.apana.org.au>, Steffen Klassert
	<steffen.klassert@...unet.com>, <netdev@...r.kernel.org>
Subject: [PATCH 0/8] pull request (net-next): ipsec-next 2025-03-24

1) Prevent setting high order sequence number bits input in
   non-ESN mode. From Leon Romanovsky.

2) Support PMTU handling in tunnel mode for packet offload.
   From Leon Romanovsky.

3) Make xfrm_state_lookup_byaddr lockless.
   From Florian Westphal.

4) Remove unnecessary NULL check in xfrm_lookup_with_ifid().
   From Dan Carpenter.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 4e41231249f4083a095085ff86e317e29313c2c3:

  Merge branch '100GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue (2025-02-11 19:51:16 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git tags/ipsec-next-2025-03-24

for you to fetch changes up to 399e0aae5aab30f911098a0430204e9034ff78bb:

  xfrm: Remove unnecessary NULL check in xfrm_lookup_with_ifid() (2025-03-19 03:13:14 +0100)

----------------------------------------------------------------
ipsec-next-2025-03-24

----------------------------------------------------------------
Dan Carpenter (1):
      xfrm: Remove unnecessary NULL check in xfrm_lookup_with_ifid()

Florian Westphal (1):
      xfrm: state: make xfrm_state_lookup_byaddr lockless

Leon Romanovsky (6):
      xfrm: prevent high SEQ input in non-ESN mode
      xfrm: delay initialization of offload path till its actually requested
      xfrm: simplify SA initialization routine
      xfrm: rely on XFRM offload
      xfrm: provide common xdo_dev_offload_ok callback implementation
      xfrm: check for PMTU in tunnel mode for packet offload

Steffen Klassert (1):
      Merge branch 'Support-PMTU-in-tunnel-mode-for-packet-offload'

 Documentation/networking/xfrm_device.rst           |  3 +-
 drivers/net/bonding/bond_main.c                    | 16 ++-----
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c    | 21 ---------
 .../chelsio/inline_crypto/ch_ipsec/chcr_ipsec.c    | 16 -------
 drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.c     | 21 ---------
 drivers/net/ethernet/intel/ixgbevf/ipsec.c         | 21 ---------
 .../ethernet/marvell/octeontx2/nic/cn10k_ipsec.c   | 15 ------
 .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c   | 16 -------
 drivers/net/ethernet/netronome/nfp/crypto/ipsec.c  | 11 -----
 drivers/net/netdevsim/ipsec.c                      | 11 -----
 drivers/net/netdevsim/netdevsim.h                  |  1 -
 include/net/xfrm.h                                 | 21 ++++++++-
 net/xfrm/xfrm_device.c                             | 46 +++++++++++++-----
 net/xfrm/xfrm_output.c                             |  6 ++-
 net/xfrm/xfrm_policy.c                             |  2 +-
 net/xfrm/xfrm_state.c                              | 54 ++++++++++------------
 net/xfrm/xfrm_user.c                               | 14 +++++-
 17 files changed, 102 insertions(+), 193 deletions(-)