From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (unknown [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id C51C08015C for ; Mon, 21 Sep 2026 14:53:18 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 68LEq57H006573; Mon, 21 Sep 2026 17:52:05 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 68LEq57H006573 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="pDRTG5To" Received: from mail-wm1-f69.google.com (mail-wm1-f69.google.com [209.85.128.69]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 68LEppsQ006524 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Mon, 21 Sep 2026 17:51:51 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 68LEppsQ006524 Received: by mail-wm1-f69.google.com with SMTP id 5b1f17b1804b1-495689bfcc8so23425285e9.1 for ; Mon, 21 Sep 2026 07:51:51 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvByI7WHYSo8g2TTus2eq6XjhPu+OeqkmYB9AxdXbCdV6qNx/2a+98oENy16rqiMJlA5w68CB2g==@openvz.org X-Gm-Message-State: AFuF++mu9Pak2Rs5Ti4ElP1+2QsSzEH5WZHNR1epgftjT5rv2Sq8u890 GaxjHk5YiAlludg+FlHoG3iyTmIqIKwHiiQmmQd+Ua2Xg5m4LNFzj6cnPgikyzxy2NsoHXKL9uM cXApEm5HgkMtppGmd/SYaAJ3mjDjc92+rYkxf6jpMx79rRE54autQuA== X-Gm-Gg: AYBFou1OLdma40Sbj6OdRLbG5LXqma0wL5QRAvwipdC2W+joLVOQew7eFNY7Au0K4dJ rCKIOshwJTSOLVLpCIJMlXuU81euHLSS4e/92ZSQvrQqQoZHv/Pl45Kfe3PcFlsl/AWxghvuKT7 eN/OloYcpct7CAZTQTmPJfpWMxSUykPc2aJbIiKyr+Xfn86QX0AjUNPGvYqhfp8+Dhj3Ul/t1ld E+2HzcCpA3OFzZsZRQkK4VRo5wGvQ4UqN+c+kigXhLvU2mTILSiay9PmS30dU8fkB0RDeYWJOiz aEA41fOAzGtOFnU3s+BGtqtU+jfJ4cxjPU1wpMtke9S+T7WsTNyef8P5kg7ZnAq9M0qaX1PHsQs GW2/LbfTfWQBthbc96Y+0gyCfyuj33A== X-Received: by 2002:a05:6000:4288:b0:485:8f37:79b7 with SMTP id ffacd0b85a97d-4871e25dd98mr13663643f8f.33.1790002310967; Mon, 21 Sep 2026 07:51:50 -0700 (PDT) X-Received: by 2002:a05:6000:4288:b0:485:8f37:79b7 with SMTP id ffacd0b85a97d-4871e25dd98mr13663617f8f.33.1790002310551; Mon, 21 Sep 2026 07:51:50 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1790002310; cv=none; d=google.com; s=arc-20260327; b=gseo2BUI8oqY/LqWRAQZnn01pACRRLo54KVJIwsn6qBv63KMSha2XQrDpA320jgBEQ 4OqER8f6XEKgz//mAt/ZdJoToO1bN4TrpOc3rTd6LbrgK8R39mhujRusFxb/Telbw/9M CrZGn2LZ8x71RvP0UaMWCCiciPMbv4ldRUY+FXbSD1om/sWLzhRol/z7ZPlFvATjdR6K KgAgSrzD1sdHb+Fbv14o6Q5fUu6KtcWNcGBeoWPphkrW6cyql2z6KpYJwAowximvm8YB LoEedfmx1EjKfmPGCSI4HuIJsUcuOUlf0JXJsYugwDF/a1TpyCo3X8DWX76bhPp3dVFT wSoQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=message-id:date:references:in-reply-to:cc:to:from:subject :content-transfer-encoding:mime-version:dkim-signature; bh=xOXmzMw4MGXq0w5tmjxUPHW1QWuBA0Cb9DFYpEtFwpQ=; fh=CTF2GHyV+XdzB5TROrdG4fdLri6JSHNOBC+LNuNq5bA=; b=Vn/lbJb9gqnfL3OQ0tveWMe7OSRuPMpHaYe7k6fc0U630vIn+p2QOTxq6Ab95cYoi1 2LVGVL5CCq78aRLuqUKIqsPyOQyTwsEYdQG1udbRp9D3PGHV//WoRW7R3wFkWsnzCotX g9CRnw2PrN9xXEMtsZc/Xv+FHKVzqiaI8eOfxe0QPPkwcRQ26lx09PfrbnVLcmXbTtNv awJqBvvX/adcMQGpkSXWL3iZBuwJAXNM8VrW6NCB4yAtpW59wGj3r0xeT2fw/9RD+SaH /BlElpmHmB86Z3giclfWvSiLgPUFsbdmdsBpkWi617EIx+Xakw7g32mONh7UhSlBHfuf GZlQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=pDRTG5To; spf=pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=vladimir.riabchun@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id ffacd0b85a97d-487244254aasi14007885f8f.16.2026.09.21.07.51.50 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 21 Sep 2026 07:51:50 -0700 (PDT) Received-SPF: pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=pDRTG5To; spf=pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=vladimir.riabchun@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Message-Id:Date:From:Subject:Content-Type: MIME-Version; bh=xOXmzMw4MGXq0w5tmjxUPHW1QWuBA0Cb9DFYpEtFwpQ=; b=pDRTG5ToLsxF yzhbb0T7s6AEvmK8G2zMHteGD/LaHuTVPXVa2KB8UjfbYzHhhP0oz+dyb/7X0vA6NiHRriATtPUFC v4TN/LkZ+yICFqt7UUtEbLMOuCfaP4LEoo3Dkti+Rfkn9avxL56IG2ioRdqMA45PEBXDQ59s/Cb7o wfkkJeP2PEf8fukYU31kmQupMq4BCj/+CGAg4mdn198kXJkYjF2OdwdhKR3gErEbuWdgfR/WC0Q99 3oswbH0GKt0Liy7/+L8xFTZi4DW0okG3EzWUDdr4aiRvts89cankypD0YZlmp+yiKP8fpqKpBnNzt Q87X9D3FmFHBccFnYO227g==; Received: from [130.117.225.5] (helo=dev012.aci.vzint.dev) by relay.virtuozzo.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1x8fK8-0032It-0E; Mon, 21 Sep 2026 16:51:41 +0200 MIME-Version: 1.0 From: Vladimir Riabchun To: Eva Kurchatova In-Reply-To: <20260831224850.1642265-1-eva.kurchatova@virtuozzo.com> References: <20260831224850.1642265-1-eva.kurchatova@virtuozzo.com> Date: Mon, 21 Sep 2026 14:51:47 +0000 Message-Id: <179000230735.645403.14576253003343582642.b4-review@b4> X-Mailer: b4 0.16.0 X-OZ-Fwd: true Cc: devel@openvz.org Subject: Re: [Devel] [PATCH vz10 1/7] ms/vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org On Tue, 01 Sep 2026 01:48:19 +0300, Eva Kurchatova wrote: > skb_tunnel_check_pmtu() can change skb->head. > > Reusing old_iph afer skb_tunnel_check_pmtu() can cause an UAF. > > Use instead ip_hdr(skb) as done in drivers/net/bareudp.c > and drivers/net/geneve.c. > > [...] Reviewed-by: Vladimir Riabchun -- Vladimir Riabchun _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel