Patch Series

Subject net: trust-after-modification fixes for IPv4 options + netlabel
Author tpluszz77@gmail.com
Date 2026-05-24 04:14:35 +0000 UTC
Version
Cc davem@davemloft.net dsahern@kernel.org edumazet@google.com fw@strlen.de horms@kernel.org huw@codeweavers.com idosch@nvidia.com kuba@kernel.org linux-security-module@vger.kernel.org lyutoon@gmail.com netdev@vger.kernel.org pabeni@redhat.com paul@paul-moore.com stable@vger.kernel.org tpluszz77@gmail.com

Patches (4)

Name Content [All]
[PATCH net v2 1/4] ipv4: validate ip_options length in __ip_options_echo() against skb tail [Body]
[PATCH net v2 2/4] ipv4: ipmr: clamp ip_hdrlen against skb_headlen in ipmr_cache_report [Body]
[PATCH net v2 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr [Body]
[PATCH net v2 4/4] netlabel: validate CIPSO option against skb tail in netlbl_skbuff_getattr [Body]
Session 2026-05-24
ID (for dev) 0a726541-4151-40ff-859c-622e58cdd1c1
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 87a1e0fe7776da7ab411be332b4be58ac8840d10 [Config] passed [Log]
[KASAN] Boot test: Base 87a1e0fe7776da7ab411be332b4be58ac8840d10 [Config] passed [Log]
[KASAN] Build Patched 87a1e0fe7776da7ab411be332b4be58ac8840d10 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 87a1e0fe7776da7ab411be332b4be58ac8840d10 [Config] [patched] passed [Log]
[KASAN] Fuzz 87a1e0fe7776da7ab411be332b4be58ac8840d10 [Config] 87a1e0fe7776da7ab411be332b4be58ac8840d10 [Config] [patched] passed [Log] [Artifacts]