]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
ipvs: skip ipv6 extension headers for csum checks
authorJulian Anastasov <ja@ssi.bg>
Sat, 14 Feb 2026 14:58:49 +0000 (16:58 +0200)
committerFlorian Westphal <fw@strlen.de>
Tue, 17 Feb 2026 14:04:20 +0000 (15:04 +0100)
commit05cfe9863ef049d98141dc2969eefde72fb07625
tree4599d0690aab613da2e772e877b4a510358aea5a
parent4edd4ba71ce0df015303dba75ea9d20d1a217546
ipvs: skip ipv6 extension headers for csum checks

Protocol checksum validation fails for IPv6 if there are extension
headers before the protocol header. iph->len already contains its
offset, so use it to fix the problem.

Fixes: 2906f66a5682 ("ipvs: SCTP Trasport Loadbalancing Support")
Fixes: 0bbdd42b7efa ("IPVS: Extend protocol DNAT/SNAT and state handlers")
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/ipvs/ip_vs_proto_sctp.c
net/netfilter/ipvs/ip_vs_proto_tcp.c
net/netfilter/ipvs/ip_vs_proto_udp.c