]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
arp: do not assume dev_hard_header() does not change skb->head
authorEric Dumazet <edumazet@google.com>
Wed, 7 Jan 2026 21:22:50 +0000 (21:22 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Jan 2026 15:35:30 +0000 (16:35 +0100)
commit949647e7771a4a01963fe953a96d81fba7acecf3
treee59ed404b4c167fbb40a4c2d6572d92aed46bde6
parentd93ba83fc3f5b9a8314ba7b8f633aac7ffb92107
arp: do not assume dev_hard_header() does not change skb->head

[ Upstream commit c92510f5e3f82ba11c95991824a41e59a9c5ed81 ]

arp_create() is the only dev_hard_header() caller
making assumption about skb->head being unchanged.

A recent commit broke this assumption.

Initialize @arp pointer after dev_hard_header() call.

Fixes: db5b4e39c4e6 ("ip6_gre: make ip6gre_header() robust")
Reported-by: syzbot+58b44a770a1585795351@syzkaller.appspotmail.com
Signed-off-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20260107212250.384552-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/ipv4/arp.c