On Tue, 10 Nov 2026 17:31:24 +0100, Denis V. Lunev wrote:
> net/ipv6: fix host panics on tunnels moved into a CT
>
> The host can move an ip6tnl, sit or vti6 tunnel into a container whose
> VE lacks the tunnel feature, or into any container for vti6. The driver
> frees its pernet struct in such a netns, and the dellink, changelink and
> ioctl handlers that look it up through dev_net(dev) dereference NULL:
> container root deleting or reconfiguring the tunnel, the container stop
> and a module unload all panic the node. "net/ip6_gre: fix a host panic
> deleting ip6gre moved into a CT without ipgre" fixes the same in ip6_gre.
>
> [...]
Applied to branch-rh10-6.12.0-211.52.1.22.x.vz10-ovz, will be released in
rh10-6.12.0-211.52.1.22.21.vz10, thanks!
[1/6] net/ip6_tunnel: fix a host panic deleting ip6tnl moved into a CT without
ipip
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/5d362b62b01a
[2/6] net/sit: fix a host panic deleting sit moved into a CT without sit
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/2a22f1e0e53c
[3/6] ms/ip6: vti: Use ip6_tnl.net in vti6_changelink().
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/d37b639025e3
[4/6] ms/ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/2eedf7336f50
[5/6] ms/ip6_vti: set netns_immutable on the fallback device.
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/beb771d146fc
[6/6] net/ip6_vti: fix host panics on a vti6 tunnel moved into a CT
https://bitbucket.org/virtuozzocore/vzkernel.vzs/commits/bdaf6e4515ce
--
Konstantin Khorenko,
Virtuozzo Linux Kernel Team
_______________________________________________
Devel mailing list
[email protected]
https://lists.openvz.org/mailman/listinfo/devel
