]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
authorMinhong He <heminhong@kylinos.cn>
Fri, 15 Aug 2025 06:38:45 +0000 (14:38 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 28 Aug 2025 14:31:14 +0000 (16:31 +0200)
commit53aee4fc347cf9712e6a8a5d4e60822c7dc51656
tree2f9f2a48987027a497d2f2b1ef3e7ffa82b67c1f
parent041e2f945f82fdbd6fff577b79c33469430297aa
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add

[ Upstream commit 84967deee9d9870b15bc4c3acb50f1d401807902 ]

The seg6_genl_sethmac() directly uses the algorithm ID provided by the
userspace without verifying whether it is an HMAC algorithm supported
by the system.
If an unsupported HMAC algorithm ID is configured, packets using SRv6 HMAC
will be dropped during encapsulation or decapsulation.

Fixes: 4f4853dc1c9c ("ipv6: sr: implement API to control SR HMAC structure")
Signed-off-by: Minhong He <heminhong@kylinos.cn>
Reviewed-by: Kuniyuki Iwashima <kuniyu@google.com>
Link: https://patch.msgid.link/20250815063845.85426-1-heminhong@kylinos.cn
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/ipv6/seg6_hmac.c