)]}'
{
  "commit": "86de3a1118a16dbbbe5fabe9aa20ffb93c072ed5",
  "tree": "f14404f687daa6286329df81db277e8cd75639ab",
  "parents": [
    "868f63c8bfafa9b827168c9126f85264c39c02ec"
  ],
  "author": {
    "name": "Qihang",
    "email": "q.h.hack.winter@gmail.com",
    "time": "Wed Sep 23 16:41:23 2026 +0800"
  },
  "committer": {
    "name": "Steffen Klassert",
    "email": "steffen.klassert@secunet.com",
    "time": "Wed Sep 30 07:54:33 2026 +0200"
  },
  "message": "xfrm: interface: validate the IP header on xmit\n\nPackets injected into an xfrm interface (e.g. AF_PACKET on an xfrmi\ndevice) reach the xfrm output path without IP header validation, but\nxfrm4_transport_output() uses iph-\u003eihl for __skb_pull() and memmove()\nand expects the header to be valid.\n\nvti_tunnel_xmit() already calls pskb_inet_may_pull() before handing\npackets to the xfrm output path.  Do the same in xfrmi_xmit() and\nperform the header checks ip_rcv_core()/ip6_rcv_core() do on entry\nto the IP stack: reject wrong IP versions and malformed IPv4 header\nlengths.\n\nFixes: f203b76d7809 (\"xfrm: Add virtual xfrm interfaces\")\nCc: stable@vger.kernel.org\nAssisted-by: LLM\nSigned-off-by: Qihang \u003cq.h.hack.winter@gmail.com\u003e\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "688306bf62c5aeb49470824c0abfb6122826ce47",
      "old_mode": 33188,
      "old_path": "net/xfrm/xfrm_interface_core.c",
      "new_id": "9835fbe63ccb83389d208e87f96bd187a1945309",
      "new_mode": 33188,
      "new_path": "net/xfrm/xfrm_interface_core.c"
    }
  ]
}