From: Toshiaki Makita <makita.toshi...@lab.ntt.co.jp> Date: Tue, 17 Apr 2018 18:46:14 +0900
> Syzkaller spotted an old bug which leads to reading skb beyond tail by 4 > bytes on vlan tagged packets. > This is caused because skb_vlan_tagged_multi() did not check > skb_headlen. ... > Fixes: 58e998c6d239 ("offloading: Force software GSO for multiple vlan tags.") > Reported-and-tested-by: syzbot+0bbe42c764feafa82...@syzkaller.appspotmail.com > Signed-off-by: Toshiaki Makita <makita.toshi...@lab.ntt.co.jp> Applied and queued up for -stable, thank you.