Martin WilliandGreg Kroah-Hartman 6867c4b5db Revert "Fix XFRM-I support for nested ESP tunnels" ...

[ Upstream commit 5fc46f9421 ]

This reverts commit b0355dbbf1.

The reverted commit clears the secpath on packets received via xfrm interfaces
to support nested IPsec tunnels. This breaks Netfilter policy matching using
xt_policy in the FORWARD chain, as the secpath is missing during forwarding.
Additionally, Benedict Wong reports that it breaks Transport-in-Tunnel mode.

Fix this regression by reverting the commit until we have a better approach
for nested IPsec tunnels.

Fixes: b0355dbbf1 ("Fix XFRM-I support for nested ESP tunnels")
Link: https://lore.kernel.org/netdev/20230412085615.124791-1-martin@strongswan.org/
Signed-off-by: Martin Willi <martin@strongswan.org>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-05-24 17:32:42 +01:00

..

6lowpan

…

9p

9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition

2023-04-20 12:35:08 +02:00

802

…

8021q

vlan: partially enable SIOCSHWTSTAMP in container

2023-05-11 23:03:18 +09:00

appletalk

…

atm

…

ax25

…

batman-adv

…

bluetooth

Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

2023-05-24 17:32:40 +01:00

bpf

Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES"

2023-03-17 08:50:32 +01:00

bpfilter

…

bridge

net: add vlan_get_protocol_and_depth() helper

2023-05-24 17:32:32 +01:00

caif

net: caif: Fix use-after-free in cfusbl_device_notify()

2023-03-17 08:50:24 +01:00

can

can: isotp: isotp_recvmsg(): use sock_recv_cmsgs() to get SOCK_RXQ_OVFL infos

2023-04-13 16:55:33 +02:00

ceph

…

core

net: Catch invalid index in XPS mapping

2023-05-24 17:32:37 +01:00

dcb

…

dccp

netfilter: keep conntrack reference until IPsecv6 policy checks are done

2023-05-11 23:03:18 +09:00

dns_resolver

…

dsa

net: dsa: tag_brcm: legacy: fix daisy-chained switches

2023-03-30 12:49:09 +02:00

ethernet

…

ethtool

ethtool: Fix uninitialized number of lanes

2023-05-17 11:53:37 +02:00

hsr

hsr: ratelimit only when errors are printed

2023-04-06 12:10:58 +02:00

ieee802154

…

ife

…

ipv4

tcp: add annotations around sk->sk_shutdown accesses

2023-05-24 17:32:32 +01:00

ipv6

net: ipv6: fix skb hash for some RST packets

2023-05-17 11:53:33 +02:00

iucv

net/iucv: Fix size of interrupt data

2023-03-22 13:33:50 +01:00

kcm

…

key

…

l2tp

inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().

2023-04-26 14:28:43 +02:00

l3mdev

…

lapb

…

llc

net: deal with most data-races in sk_wait_event()

2023-05-24 17:32:32 +01:00

mac80211

wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta

2023-04-13 16:55:19 +02:00

mac802154

…

mctp

…

mpls

…

mptcp

mptcp: fix accept vs worker race

2023-05-01 08:26:27 +09:00

ncsi

net/ncsi: clear Tx enable mode when handling a Config required AEN

2023-05-17 11:53:32 +02:00

netfilter

ipvs: Update width of source for ip_vs_sync_conn_options

2023-05-24 17:32:39 +01:00

netlabel

…

netlink

netlink: annotate accesses to nlk->cb_running

2023-05-24 17:32:32 +01:00

netrom

…

nfc

nfc: change order inside nfc_se_io error path

2023-03-17 08:50:17 +01:00

nsh

…

openvswitch

net: openvswitch: fix race on port output

2023-04-20 12:35:09 +02:00

packet

net: add vlan_get_protocol_and_depth() helper

2023-05-24 17:32:32 +01:00

phonet

…

psample

…

qrtr

net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()

2023-04-20 12:35:09 +02:00

rds

…

rfkill

…

rose

…

rxrpc

rxrpc: Fix hard call timeout units

2023-05-17 11:53:35 +02:00

sched

net/sched: act_mirred: Add carrier check

2023-05-17 11:53:34 +02:00

sctp

sctp: Call inet6_destroy_sock() via sk->sk_destruct().

2023-04-26 14:28:43 +02:00

smc

net: deal with most data-races in sk_wait_event()

2023-05-24 17:32:32 +01:00

strparser

…

sunrpc

SUNRPC: remove the maximum number of retries in call_bind_status

2023-05-11 23:03:35 +09:00

switchdev

…

tipc

net: deal with most data-races in sk_wait_event()

2023-05-24 17:32:32 +01:00

tls

net: deal with most data-races in sk_wait_event()

2023-05-24 17:32:32 +01:00

unix

af_unix: Fix data races around sk->sk_shutdown.

2023-05-24 17:32:33 +01:00

vmw_vsock

…

wireless

wifi: cfg80211: fix MLO connection ownership

2023-03-22 13:33:43 +01:00

x25

…

xdp

xsk: Fix unaligned descriptor validation

2023-05-11 23:03:21 +09:00

xfrm

Revert "Fix XFRM-I support for nested ESP tunnels"

2023-05-24 17:32:42 +01:00

compat.c

…

devres.c

…

Kconfig

…

Kconfig.debug

…

Makefile

…

socket.c

net: annotate sk->sk_err write from do_recvmmsg()

2023-05-24 17:32:32 +01:00

sysctl_net.c

…