Subject ipv4: harden against ihl < 5 IP_HDRINCL packets
Author michael.bommarito@gmail.com
Date 2026-05-12 20:51:14 +0000 UTC
Version
Cc coreteam@netfilter.org davem@davemloft.net edumazet@google.com fw@strlen.de gustavoars@kernel.org herbert@gondor.apana.org.au jlayton@kernel.org kees@kernel.org kuba@kernel.org kuniyu@google.com linux-kernel@vger.kernel.org maze@google.com michael.bommarito@gmail.com netdev@vger.kernel.org netfilter-devel@vger.kernel.org pabeni@redhat.com pablo@netfilter.org stable@vger.kernel.org steffen.klassert@secunet.com
Patches (2)
Name Content [All]
[PATCH net 1/2] ipv4: raw: reject IP_HDRINCL packets with ihl < 5 [Body]
[PATCH net 2/2] ipv4: ah: harden ah_output options-copy guard against ihl < 5 [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-05-12
Passed
ID (for dev) e227d5c5-6fcf-458b-b605-1861bf38c589
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 73d587ae684d176fac9db94173f77d78a794ea4f [Config] passed [Log]
[KASAN] Boot test: Base 73d587ae684d176fac9db94173f77d78a794ea4f [Config] passed [Log]
[KASAN] Build Patched 73d587ae684d176fac9db94173f77d78a794ea4f [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 73d587ae684d176fac9db94173f77d78a794ea4f [Config] [patched] passed [Log]
[KASAN] Fuzz 73d587ae684d176fac9db94173f77d78a794ea4f [Config] 73d587ae684d176fac9db94173f77d78a794ea4f [Config] [patched] passed [Log] [Artifacts]