Subject: Re: [PATCH net 0/2] netfilter: br_netfilter: fix panic with metadata_dst skb

From: [email-masked]
Date: Fri, 04 Oct 2024 19:10:34 +0000

Hello:

This series was applied to netdev/net.git (main)
by Jakub Kicinski <[email-masked]>:

On Tue, 1 Oct 2024 08:43:58 -0700 you wrote:
> There's a kernel panic possible in the br_netfilter module when sending
> untagged traffic via a VxLAN device. Traceback is included below.
> This happens during the check for fragmentation in br_nf_dev_queue_xmit
> if the MTU on the VxLAN device is not big enough.
> 
> It is dependent on:
> 1) the br_netfilter module being loaded;
> 2) net.bridge.bridge-nf-call-iptables set to 1;
> 3) a bridge with a VxLAN (single-vxlan-device) netdevice as a bridge port;
> 4) untagged frames with size higher than the VxLAN MTU forwarded/flooded
> 
> [...]

Here is the summary with links:
  - [net,1/2] netfilter: br_netfilter: fix panic with metadata_dst skb
    https://git.kernel.org/netdev/net/c/f9ff7665cd12
  - [net,2/2] selftests: add regression test for br_netfilter panic
    https://git.kernel.org/netdev/net/c/bc4d22b72a2d

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html