Subject ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments
Author axel.mierczuk@1password.com
Date 2026-09-25 14:11:54 +0000 UTC
Version
Cc axel.mierczuk@1password.com coreteam@netfilter.org dsahern@kernel.org edumazet@google.com fw@strlen.de horms@verge.net.au idosch@nvidia.com ja@ssi.bg keith.hoodlet@1password.com lvs-devel@vger.kernel.org netdev@vger.kernel.org netfilter-devel@vger.kernel.org pablo@netfilter.org phil@nwl.cc stable@vger.kernel.org w@1wt.eu
Patches (2)
Name Content [All]
[PATCH nf 1/2] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp_v6 [Body]
[PATCH nf 2/2] ipv6: update *offset for non-first fragments in ipv6_find_hdr() [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-09-25
Passed
ID (for dev) d09fa33f-8451-4fc6-bd96-e1af34761ed9
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] passed [Log]
[KASAN] Boot test: Base 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] passed [Log]
[KASAN] Build Patched 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] [patched] passed [Log]
[KASAN] Fuzz 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] [patched] passed [Log] [Artifacts]