umber-kernel/net
Antony Antony b7f9587f31 xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set
[ Upstream commit c196def07bbc6e8306d7a274433913444b0db20a ]

The XFRM_STATE_NOPMTUDISC flag is only meaningful for output SAs, but
it was being applied regardless of the SA direction when the sysctl
ip_no_pmtu_disc is enabled. This can unintentionally affect input SAs.

Limit setting XFRM_STATE_NOPMTUDISC to output SAs when the SA direction
is configured.

Closes: https://github.com/strongswan/strongswan/issues/2946
Fixes: a4a87fa4e9 ("xfrm: Add Direction to the SA in or out")
Signed-off-by: Antony Antony <antony.antony@secunet.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2026-01-23 11:21:13 +01:00
..
6lowpan
9p 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN 2025-09-19 16:34:51 +09:00
802
8021q net: vlan: sync VLAN features with lower device 2025-10-31 17:42:35 -07:00
appletalk
atm net: atm: fix incorrect cleanup function call in error path 2025-11-20 18:09:49 -08:00
ax25 ax25: properly unshare skbs in ax25_kiss_rcv() 2025-09-03 17:06:30 -07:00
batman-adv Here is a batman-adv bugfix: 2025-10-27 18:00:54 -07:00
bluetooth Bluetooth: MGMT: report BIS capability flags in supported settings 2026-01-08 10:16:44 +01:00
bpf bpf: Fix reference count leak in bpf_prog_test_run_xdp() 2026-01-17 16:35:31 +01:00
bridge bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress 2026-01-17 16:35:22 +01:00
caif caif: fix integer underflow in cffrml_receive() 2026-01-02 12:56:47 +01:00
can can: j1939: make j1939_session_activate() fail if device is no longer registered 2026-01-17 16:35:33 +01:00
ceph libceph: make calc_target() set t->paused, not just clear it 2026-01-17 16:35:15 +01:00
core net: fix memory leak in skb_segment_list for GRO packets 2026-01-17 16:35:26 +01:00
dcb Revert "Documentation: net: add flow control guide and document ethtool API" 2025-10-01 09:48:21 +02:00
devlink devlink: rate: Unset parent pointer in devl_rate_nodes_destroy 2025-11-18 17:12:21 -08:00
dns_resolver
dsa net: dsa: fix missing put_device() in dsa_tree_find_first_conduit() 2026-01-08 10:16:45 +01:00
ethernet ethernet: Extend device_get_mac_address() to use NVMEM 2025-09-15 18:34:08 -07:00
ethtool ethtool: Avoid overflowing userspace buffer on stats query 2026-01-02 12:56:48 +01:00
handshake net/handshake: restore destructor on submit failure 2026-01-02 12:57:23 +01:00
hsr net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() 2026-01-02 12:56:57 +01:00
ieee802154
ife
ipv4 xfrm: Fix inner mode lookup in tunnel mode GSO segmentation 2026-01-23 11:21:13 +01:00
ipv6 xfrm: Fix inner mode lookup in tunnel mode GSO segmentation 2026-01-23 11:21:13 +01:00
iucv net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers 2025-08-28 13:14:50 +02:00
kcm
key
l2tp l2tp: reset skb control buffer on xmit 2025-11-20 11:52:24 +01:00
l3mdev
lapb
llc
mac80211 wifi: mac80211: restore non-chanctx injection behaviour 2026-01-17 16:35:15 +01:00
mac802154
mctp net: mctp: unconditionally set skb->dev on dst output 2025-11-27 11:39:12 +01:00
mpls
mptcp mptcp: ensure context reset on disconnect() 2026-01-11 15:26:19 +01:00
ncsi
netfilter netfilter: nf_tables: avoid chain re-validation if possible 2026-01-17 16:35:32 +01:00
netlabel audit: add record for multiple task security contexts 2025-08-30 10:15:30 -04:00
netlink Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2025-09-11 17:40:13 -07:00
netrom netrom: Fix memory leak in nr_sendmsg() 2026-01-02 12:56:43 +01:00
nfc net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write 2026-01-08 10:17:14 +01:00
nsh
openvswitch net: openvswitch: Avoid needlessly taking the RTNL on vport destroy 2026-01-08 10:16:44 +01:00
packet net: af_packet: Use hrtimer to do the retire operation 2025-09-11 18:40:06 -07:00
phonet net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers 2025-08-28 13:14:50 +02:00
psample
psp net: psp: don't assume reply skbs will have a socket 2025-10-03 10:23:50 -07:00
qrtr
rds net: WQ_PERCPU added to alloc_workqueue users 2025-09-22 17:40:30 -07:00
rfkill net: replace use of system_wq with system_percpu_wq 2025-09-22 17:40:30 -07:00
rose net: rose: fix invalid array index in rose_kill_by_device() 2026-01-08 10:16:49 +01:00
rxrpc net: WQ_PERCPU added to alloc_workqueue users 2025-09-22 17:40:30 -07:00
sched net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset 2026-01-17 16:35:29 +01:00
sctp sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). 2025-12-18 14:02:41 +01:00
shaper
smc net/smc: fix mismatch between CLC header and proposal 2025-11-10 17:52:09 -08:00
strparser strparser: Fix signed/unsigned mismatch bug 2025-11-07 18:17:16 -08:00
sunrpc SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf 2026-01-02 12:57:25 +01:00
switchdev
tipc tipc: Fix use-after-free in tipc_mon_reinit_self(). 2025-11-10 18:14:40 -08:00
tls net: tls: Cancel RX async resync request on rcd_delta overflow 2025-10-29 18:32:18 -07:00
unix net: do not write to msg_get_inq in callee 2026-01-17 16:35:11 +01:00
vmw_vsock vsock: Make accept()ed sockets use custom setsockopt() 2026-01-17 16:35:25 +01:00
wireless wifi: avoid kernel-infoleak from struct iw_point 2026-01-17 16:35:14 +01:00
x25
xdp xsk: avoid data corruption on cq descriptor number 2025-11-25 19:51:50 -08:00
xfrm xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set 2026-01-23 11:21:13 +01:00
Kconfig dibs: Create drivers/dibs 2025-09-23 11:13:21 +02:00
Kconfig.debug
Makefile psp: base PSP device support 2025-09-18 12:32:06 +02:00
compat.c
devres.c
socket.c Networking changes for 6.18. 2025-10-02 15:17:01 -07:00
sysctl_net.c