netdev - [PATCH 0/8] pull request (net): ipsec 2025-07-23

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250723075417.3432644-1-steffen.klassert@secunet.com>
Date: Wed, 23 Jul 2025 09:53:52 +0200
From: Steffen Klassert <steffen.klassert@...unet.com>
To: David Miller <davem@...emloft.net>, Jakub Kicinski <kuba@...nel.org>
CC: Herbert Xu <herbert@...dor.apana.org.au>, Steffen Klassert
	<steffen.klassert@...unet.com>, <netdev@...r.kernel.org>
Subject: [PATCH 0/8] pull request (net): ipsec 2025-07-23

1) Premption fixes for xfrm_state_find.
   From Sabrina Dubroca.

2) Initialize offload path also for SW IPsec GRO. This fixes a
   performance regression on SW IPsec offload.
   From Leon Romanovsky.

3) Fix IPsec UDP GRO for IKE packets.
   From Tobias Brunner,

4) Fix transport header setting for IPcomp after decompressing.
   From Fernando Fernandez Mancera.

5)  Fix use-after-free when xfrmi_changelink tries to change
    collect_md for a xfrm interface.
    From Eyal Birger .

6) Delete the special IPcomp x->tunnel state along with the state x
   to avoid refcount problems.
   From Sabrina Dubroca.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit b56bbaf8c9ffe02468f6ba8757668e95dda7e62c:

  Merge branch 'net-airoha-fix-ipv6-hw-acceleration' (2025-06-03 13:04:09 +0200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git tags/ipsec-2025-07-23

for you to fetch changes up to 28712d6ed32028b0f2e0defe6681411496971ca3:

  Merge branch 'ipsec: fix splat due to ipcomp fallback tunnel' (2025-07-14 08:59:48 +0200)

----------------------------------------------------------------
ipsec-2025-07-23

----------------------------------------------------------------
Eyal Birger (1):
      xfrm: interface: fix use-after-free after changing collect_md xfrm interface

Fernando Fernandez Mancera (1):
      xfrm: ipcomp: adjust transport header after decompressing

Leon Romanovsky (1):
      xfrm: always initialize offload path

Sabrina Dubroca (4):
      xfrm: state: initialize state_ptrs earlier in xfrm_state_find
      xfrm: state: use a consistent pcpu_id in xfrm_state_find
      xfrm: delete x->tunnel as we delete x
      Revert "xfrm: destroy xfrm_state synchronously on net exit path"

Steffen Klassert (2):
      Merge branch 'xfrm: fixes for xfrm_state_find under preemption'
      Merge branch 'ipsec: fix splat due to ipcomp fallback tunnel'

Tobias Brunner (1):
      xfrm: Set transport header to fix UDP GRO handling

 include/net/xfrm.h             | 15 +++------
 net/ipv4/ipcomp.c              |  2 ++
 net/ipv4/xfrm4_input.c         |  3 ++
 net/ipv6/ipcomp6.c             |  2 ++
 net/ipv6/xfrm6_input.c         |  3 ++
 net/ipv6/xfrm6_tunnel.c        |  2 +-
 net/key/af_key.c               |  2 +-
 net/xfrm/xfrm_device.c         |  1 -
 net/xfrm/xfrm_interface_core.c |  7 +----
 net/xfrm/xfrm_ipcomp.c         |  3 +-
 net/xfrm/xfrm_state.c          | 69 ++++++++++++++++--------------------------
 net/xfrm/xfrm_user.c           |  3 +-
 12 files changed, 46 insertions(+), 66 deletions(-)