)]}'
{
  "commit": "c84ff04def255edb51e57c9f969efdfade0da16a",
  "tree": "d9d91746256c5170bf2ac70b129abcfc3c887c2e",
  "parents": [
    "ff6e798c2eac3ebd0501ad7e796f583fab928de8",
    "6851161feb01cea41358c9ec304bd2f981fc8505"
  ],
  "author": {
    "name": "Jakub Kicinski",
    "email": "kuba@kernel.org",
    "time": "Fri May 29 12:57:22 2026 -0700"
  },
  "committer": {
    "name": "Jakub Kicinski",
    "email": "kuba@kernel.org",
    "time": "Fri May 29 12:57:23 2026 -0700"
  },
  "message": "Merge tag \u0027ipsec-2026-05-29\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec\n\nSteffen Klassert says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npull request (net): ipsec 2026-05-29\n\n1) xfrm: route MIGRATE notifications to caller\u0027s netns\n   Thread the caller\u0027s netns through km_migrate() so that\n   MIGRATE notifications go to the issuing netns, fixing both the\n   init_net listener leak and MOBIKE notifications inside\n   non-init netns. From Maoyi Xie.\n\n2) xfrm: ipcomp: Free destination pages on acomp errors\n   Move the out_free_req label up so that allocated destination\n   pages are released on decompression errors, not only on success.\n   From Herbert Xu.\n\n3) xfrm: Check for underflow in xfrm_state_mtu\n   Reject configurations that cause xfrm_state_mtu() to underflow,\n   preventing a negative TFCPAD value from becoming a memset size\n   that triggers an out-of-bounds write of several terabytes.\n   From David Ahern.\n\n4) xfrm: ah: use skb_to_full_sk in async output callbacks\n   Convert the possibly-incomplete skb-\u003esk to a full socket pointer\n   in async AH callbacks so that a request_sock or timewait_sock\n   never reaches xfrm_output_resume() downstream consumers.\n   From Michael Bommarito.\n\n5) Add and revert: esp: fix page frag reference leak on skb_to_sgvec failure\n   The patch does not fix te issue completely.\n\n6) xfrm: esp: restore combined single-frag length gate\n   Check the aligned post-trailer combined length against a page limit\n   in the fast path, preventing skb_page_frag_refill() from falling\n   back to a page too small for the destination scatterlist.\n   From Jingguo Tan.\n\n7) xfrm: iptfs: reset runtime state when cloning SAs\n   Reinitialise the clone\u0027s mode_data runtime objects before\n   publishing it, preventing queued skbs from being freed with\n   list state copied from the original SA when migration fails.\n   From Shaomin Chen.\n\n8) xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit\n   Flush policy tables and drain the workqueue in a .pre_exit handler\n   so that cleanup_net() pays one RCU grace period per batch instead\n   of one per namespace, fixing stalls at high CLONE_NEWNET rates.\n   From Usama Arif.\n\n9) xfrm: input: hold netns during deferred transport reinjection\n   Take a netns reference when queueing deferred transport reinjection\n   work and drop it after the callback completes, keeping the skb-\u003ecb\n   net pointer valid until the deferred work runs.\n   From Zhengchuan Liang.\n\n* tag \u0027ipsec-2026-05-29\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec:\n  Revert \"esp: fix page frag reference leak on skb_to_sgvec failure\"\n  xfrm: input: hold netns during deferred transport reinjection\n  xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit\n  xfrm: iptfs: reset runtime state when cloning SAs\n  xfrm: esp: restore combined single-frag length gate\n  esp: fix page frag reference leak on skb_to_sgvec failure\n  xfrm: ah: use skb_to_full_sk in async output callbacks\n  xfrm: Check for underflow in xfrm_state_mtu\n  xfrm: ipcomp: Free destination pages on acomp errors\n  xfrm: route MIGRATE notifications to caller\u0027s netns\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nLink: https://patch.msgid.link/20260529092648.3878973-1-steffen.klassert@secunet.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n",
  "tree_diff": []
}