]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
arp: do not assume dev_hard_header() does not change skb->head
authorEric Dumazet <edumazet@google.com>
Wed, 7 Jan 2026 21:22:50 +0000 (21:22 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 19 Jan 2026 12:10:17 +0000 (13:10 +0100)
commit393525dee5c39acff8d6705275d7fcaabcfb7f0a
tree7e65aa6a556d783145fce9e0c623b59450f1afd7
parent2caa31d02c73ec9c73755cc08a556465b8f29566
arp: do not assume dev_hard_header() does not change skb->head

[ Upstream commit c92510f5e3f82ba11c95991824a41e59a9c5ed81 ]

arp_create() is the only dev_hard_header() caller
making assumption about skb->head being unchanged.

A recent commit broke this assumption.

Initialize @arp pointer after dev_hard_header() call.

Fixes: db5b4e39c4e6 ("ip6_gre: make ip6gre_header() robust")
Reported-by: syzbot+58b44a770a1585795351@syzkaller.appspotmail.com
Signed-off-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20260107212250.384552-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/ipv4/arp.c