Pablo Neira Ayuso 94b23988c3 netfilter: nft_payload: do not update layer 4 checksum when mangling fragments ...

commit 4e1860a386 upstream.

IP fragments do not come with the transport header, hence skip bogus
layer 4 checksum updates.

Fixes: 1814096980 ("netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields")
Reported-and-tested-by: Steffen Weinreich <steve@weinreich.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-02-01 17:25:40 +01:00

..

6lowpan

6lowpan: iphc: Fix an off-by-one check of array index

2021-09-15 09:50:34 +02:00

9p

9p/net: fix missing error check in p9_check_errors

2021-11-18 14:04:29 +01:00

802

net/802/garp: fix memleak in garp_request_join()

2021-07-31 08:16:11 +02:00

8021q

net: vlan: fix underflow for the real_dev refcnt

2021-12-01 09:19:08 +01:00

appletalk

…

atm

…

ax25

ax25: uninitialized variable in ax25_setsockopt()

2022-01-27 10:54:03 +01:00

batman-adv

batman-adv: allow netlink usage in unprivileged containers

2022-01-27 10:54:11 +01:00

bluetooth

Bluetooth: refactor malicious adv data check

2022-02-01 17:25:38 +01:00

bpf

bpf, test, cgroup: Use sk_{alloc,free} for test cases

2021-10-27 09:56:56 +02:00

bpfilter

…

bridge

netfilter: bridge: add support for pppoe filtering

2022-01-27 10:53:52 +01:00

caif

net-caif: avoid user-triggerable WARN_ON(1)

2021-09-22 12:27:56 +02:00

can

can: isotp: convert struct tpcon::{idx,len} to unsigned int

2022-01-16 09:14:23 +01:00

ceph

…

core

devlink: Remove misleading internal_flags from health reporter dump

2022-01-27 10:54:34 +01:00

dcb

…

dccp

tcp: switch orphan_count to bare per-cpu counters

2021-11-18 14:04:08 +01:00

decnet

net: decnet: Fix sleeping inside in af_decnet

2021-07-28 14:35:38 +02:00

dns_resolver

…

dsa

net: dsa: don't allocate the slave_mii_bus using devres

2021-09-30 10:11:02 +02:00

ethernet

…

ethtool

ethtool: do not perform operations on net devices being unregistered

2021-12-17 10:14:41 +01:00

hsr

…

ieee802154

net: Fix memory leak in ieee802154_raw_deliver

2021-08-18 08:59:12 +02:00

ife

…

ipv4

gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()

2022-01-27 10:54:33 +01:00

ipv6

xfrm: fix policy lookup for ipv6 gre packets

2022-01-27 10:54:26 +01:00

iucv

…

kcm

…

key

…

l2tp

net/l2tp: Fix reference count leak in l2tp_udp_recv_core

2021-09-22 12:27:56 +02:00

l3mdev

…

lapb

…

llc

net: llc: fix skb_over_panic

2021-08-04 12:46:43 +02:00

mac80211

mac80211: allow non-standard VHT MCS-10/11

2022-01-27 10:54:19 +01:00

mac802154

…

mpls

net: mpls: Fix notifications when deleting a device

2021-12-08 09:03:23 +01:00

mptcp

mptcp: clear 'kern' flag from fallback sockets

2021-12-22 09:30:54 +01:00

ncsi

net/ncsi: check for error return from call to nla_put_u32

2022-01-05 12:40:32 +01:00

netfilter

netfilter: nft_payload: do not update layer 4 checksum when mangling fragments

2022-02-01 17:25:40 +01:00

netlabel

net: fix NULL pointer reference in cipso_v4_doi_free

2021-09-18 13:40:35 +02:00

netlink

net: netlink: af_netlink: Prevent empty skb by adding a check on len.

2021-12-17 10:14:40 +01:00

netrom

netrom: fix api breakage in nr_setsockopt()

2022-01-27 10:54:03 +01:00

nfc

nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()

2022-01-27 10:53:41 +01:00

nsh

…

openvswitch

ovs: clear skb->tstamp in forwarding path

2021-08-26 08:35:50 -04:00

packet

net/packet: rx_owner_map depends on pg_vec

2021-12-22 09:30:55 +01:00

phonet

phonet: refcount leak in pep_sock_accep

2022-01-11 15:25:01 +01:00

psample

…

qrtr

net: qrtr: fix another OOB Read in qrtr_endpoint_post

2021-09-03 10:09:21 +02:00

rds

rds: memory leak in __rds_conn_create()

2021-12-22 09:30:54 +01:00

rfkill

…

rose

…

rxrpc

rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()

2021-12-08 09:03:25 +01:00

sched

net_sched: restore "mpu xxx" handling

2022-01-27 10:54:35 +01:00

sctp

sctp: use call_rcu to free endpoint

2022-01-05 12:40:30 +01:00

smc

net/smc: Fix hung_task when removing SMC-R devices

2022-01-27 10:54:32 +01:00

strparser

bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding

2021-11-18 14:04:27 +01:00

sunrpc

fsnotify: fix fsnotify hooks in pseudo filesystems

2022-02-01 17:25:39 +01:00

switchdev

…

tipc

tipc: check for null after calling kmemdup

2021-11-26 10:39:19 +01:00

tls

net/tls: Fix authentication failure in CCM mode

2021-12-08 09:03:29 +01:00

unix

af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress

2022-01-27 10:54:31 +01:00

vmw_vsock

virtio/vsock: fix the transport to work with VMADDR_CID_ANY

2021-12-22 09:30:52 +01:00

wimax

…

wireless

cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

2021-11-26 10:39:20 +01:00

x25

…

xdp

Revert "xsk: Do not sleep in poll() when need_wakeup set"

2021-12-22 09:30:59 +01:00

xfrm

xfrm: Don't accidentally set RTO_ONLINK in decode_session4()

2022-01-27 10:54:33 +01:00

compat.c

…

devres.c

…

Kconfig

…

Makefile

…

socket.c

ethtool: improve compat ioctl handling

2021-09-18 13:40:21 +02:00

sysctl_net.c

…