]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
xfrm: Allow UDP encapsulation only in offload modes
authorLeon Romanovsky <leonro@nvidia.com>
Tue, 12 Mar 2024 11:55:22 +0000 (13:55 +0200)
committerSasha Levin <sashal@kernel.org>
Tue, 26 Mar 2024 22:18:56 +0000 (18:18 -0400)
commit44d5790232822f6dd56e29e0e4dc376830ae1f1a
tree728970873acd4aba449e2f72bf537135a2db8c17
parentee413f30ec4fe94a0bdf32c8f042cb06fa913234
xfrm: Allow UDP encapsulation only in offload modes

[ Upstream commit 773bb766ca4a05bf363203030b72b10088869224 ]

The missing check of x->encap caused to the situation where GSO packets
were created with UDP encapsulation.

As a solution return the encap check for non-offloaded SA.

Fixes: 983a73da1f99 ("xfrm: Pass UDP encapsulation in TX packet offload")
Closes: https://lore.kernel.org/all/a650221ae500f0c7cf496c61c96c1b103dcb6f67.camel@redhat.com
Reported-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/xfrm/xfrm_device.c