)]}'
{
  "commit": "c8c2c8a2bbe4319f63d029d161aaee2b17687371",
  "tree": "d5b407598e0c7b56f0155f6e3cbc730ca1b184a4",
  "parents": [
    "f9a11716c8445b496e9fafeec7e8412d384d02e2"
  ],
  "author": {
    "name": "Antony Antony",
    "email": "antony.antony@secunet.com",
    "time": "Wed Oct 07 11:34:28 2026 +0200"
  },
  "committer": {
    "name": "Steffen Klassert",
    "email": "steffen.klassert@secunet.com",
    "time": "Mon Oct 19 08:02:02 2026 +0200"
  },
  "message": "xfrm: state: reject mark with bits outside its mask on add\n\nA mark/mask like 0x101/0xff is silently truncated to 0x01/0xff on\ninsert, so the exact-match lookups added later in this series (DELSA,\nGETSA, GETAE, NEWAE, EXPIRE, MIGRATE_STATE) could not find the SA.\nReject it instead.\n\nThe mark is no longer sanitized on state add.\n\nAlso reject an invalid XFRMA_MARK (the new mark) in\nXFRM_MSG_MIGRATE_STATE.\n\nFixes: 0b91fda3a1f0 (\"xfrm: Sanitize marks before insert\")\nCc: \u003cstable+noautosel@kernel.org\u003e # needs exact-match SA lookups from this series\nSigned-off-by: Antony Antony \u003cantony.antony@secunet.com\u003e\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e45aa1ed5b96591a6e974a74fa2d0eea610a2679",
      "old_mode": 33188,
      "old_path": "net/xfrm/xfrm_state.c",
      "new_id": "602404ffc4d4b5bd52c690476305cdfec6ff5a86",
      "new_mode": 33188,
      "new_path": "net/xfrm/xfrm_state.c"
    },
    {
      "type": "modify",
      "old_id": "a2587c7e796b4ee4706adc4a4a9dd2898e5f8e45",
      "old_mode": 33188,
      "old_path": "net/xfrm/xfrm_user.c",
      "new_id": "0723d791b8b70602f0fa5b258202f16324aec014",
      "new_mode": 33188,
      "new_path": "net/xfrm/xfrm_user.c"
    }
  ]
}