Hello:
This series was applied to netdev/net-next.git (main)
by Jakub Kicinski <[email protected]>:
On Thu, 15 Oct 2026 14:47:48 +0200 you wrote:
> An IPv4 later fragment carries no L4 header, but key extraction leaves
> ip.proto set to the real protocol and the flow may wildcard the frag
> field, so validate_set() accepts such packets. set_tcp() and set_udp()
> then treat the first bytes of the fragment payload as an L4 header,
> rewrite them as ports and patch the bytes at the checksum offset,
> corrupting the packet.
>
> [...]
Here is the summary with links:
- [1/2,net-next] net: openvswitch: skip IPv4 later fragments on TCP/UDP set
actions
https://git.kernel.org/netdev/net-next/c/14c0350142ab
- [2/2,net-next] net: openvswitch: drop IP fragments on SCTP set action
https://git.kernel.org/netdev/net-next/c/4d0d8f491307
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
